DNS working but unable to snapin
Ok, I found an employee attempting to enable Windows Deployment Services on my domain controller. I stopped it and had the process cancelled and ever since then I am running into issues with this Domain Controller.
The funny thisng is this. DNS is working on the DC. I can open DNS via my workstations Admin Tools but when you are on the DC and click DNS in Admin Tools it will not load the snapin. I have attempted to run MMC and snap it in manually but DNS is not an option. So far I have
1. Restarted the DC
2. Restarted the DNS Server service
Event Viewer shows DNS successfully performing zone transfers. So I am at a loss for what this is. I have read many topics but in each instance DNS wasn't working or it was someone did not know how to right click and add server, I do not get these options. DNSMGMT.MSC is in the system32 folder.
I had two event errors this morning but they cleared with a restart
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 6/15/2010
Time: 8:18:01 AM
User: N/A
Computer: DC1
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
and
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 6/15/2010
Time: 8:18:01 AM
User: N/A
Computer: DC1
Description:
The DNS server was unable to complete directory service enumeration of zone .. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
The funny thisng is this. DNS is working on the DC. I can open DNS via my workstations Admin Tools but when you are on the DC and click DNS in Admin Tools it will not load the snapin. I have attempted to run MMC and snap it in manually but DNS is not an option. So far I have
1. Restarted the DC
2. Restarted the DNS Server service
Event Viewer shows DNS successfully performing zone transfers. So I am at a loss for what this is. I have read many topics but in each instance DNS wasn't working or it was someone did not know how to right click and add server, I do not get these options. DNSMGMT.MSC is in the system32 folder.
I had two event errors this morning but they cleared with a restart
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4015
Date: 6/15/2010
Time: 8:18:01 AM
User: N/A
Computer: DC1
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
and
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 4004
Date: 6/15/2010
Time: 8:18:01 AM
User: N/A
Computer: DC1
Description:
The DNS server was unable to complete directory service enumeration of zone .. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
You may try removing the Adminpak from the machine then reinstalling with the most update version of the adminpak you can find on microsofts website.
Hi,
Please run DCdiag /verbose and check for errors, paste the resultant output for further diagnosis.
Also was looking it upon Expert-Exchange forums, found the following link for reference:
http://www.experts-exchange.com/Networking/Protocols/DNS/Q_22901131.html
Please run DCdiag /verbose and check for errors, paste the resultant output for further diagnosis.
Also was looking it upon Expert-Exchange forums, found the following link for reference:
http://www.experts-exchange.com/Networking/Protocols/DNS/Q_22901131.html
Also have a look at the following expert-exchange link, similar to your issue:
http://www.experts-exchange.com/Operating_Systems/Q_21634533.html
http://www.experts-exchange.com/Operating_Systems/Q_21634533.html
Thanks for the two links but they are not applicable to my situation, I have four DC's.
I ran dcdiag from the DC that I cannot snapin DNS, here is the result
C:\Documents and Settings\username>dcdiag.e
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine DC1, is a DC.
* Connecting to directory service on server DC1.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 4 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: HQ\DC1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... DC1 passed test Connectivity
Doing primary tests
Testing server: HQ\DC1
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=domai
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
DC=DomainDnsZones,DC=domai
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 10 entries in the vector were ignored.
10 were retired Invocations. 0 were either: read-only replic
s and are not verifiably latent, or dc's no longer replicating this nc. 0 had
o latency information (Win2K DC).
CN=Configuration,DC=doamin
Latency information for 9 entries in the vector were ignored.
9 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
DC=doaminname,DC=com
Latency information for 9 entries in the vector were ignored.
9 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
......................... DC1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DC1.
* Security Permissions Check for
DC=ForestDnsZones,DC=domai
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=domai
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=domain
(Configuration,Version 2)
* Security Permissions Check for
DC=domainname,DC=com
(Domain,Version 2)
......................... DC1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DC1\netlogon
Verified share \\DC1\sysvol
......................... DC1 passed test NetLogons
Starting test: Advertising
The DC SDC0001 is advertising itself as a DC and having a DS.
The DC SDC0001 is advertising as an LDAP server
The DC SDC0001 is advertising as having a writeable directory
The DC SDC0001 is advertising as a Key Distribution Center
The DC SDC0001 is advertising as a time server
The DS SDC0001 is advertising as a GC.
......................... DC1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=DC2,CN=Servers
es,CN=Configuration,DC=dom
Role Domain Owner = CN=NTDS Settings,CN=DC2,CN=Servers
es,CN=Configuration,DC=dom
Role PDC Owner = CN=NTDS Settings,CN=DC2,CN=Servers
CN=Configuration,DC=domain
Role Rid Owner = CN=NTDS Settings,CN=DC2,CN=Servers
CN=Configuration,DC=domain
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SDC0002,CN=Ser
rs,CN=HQ,CN=Sites,CN=Confi
......................... DC1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1723606 to 1073741823
* dc2.domainname.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1723106 to 1723605
* rIDPreviousAllocationPool is 1721106 to 1721605
* rIDNextRID: 1721360
......................... DC1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC SDC0001 on DC SDC0001.
* SPN found :LDAP/DC1.domainname.com/d
* SPN found :LDAP/DC1.domainname.com
* SPN found :LDAP/DC1
* SPN found :LDAP/DC1.domainname.com/d
* SPN found :LDAP/6774ce53-f724-4d3b-9
* SPN found :E3514235-4B06-11D1-AB04-0
91-afaeff8b5641/domainname
* SPN found :HOST/DC1.domainname.com/d
* SPN found :HOST/DC1.domainname.com
* SPN found :HOST/DC1
* SPN found :HOST/DC1.domainname.com/d
* SPN found :GC/DC1.domainname.com/dom
......................... DC1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DC1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
DC1 is in domain DC=domainname,DC=com
Checking for CN=DC1,OU=Domain Controllers,DC=domainname,
domain DC=domainname,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=DC1,CN=Servers
onfiguration,DC=domainname
com on 1 servers
Object is up-to-date on all servers.
......................... DC1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DC1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DC1 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minu
es.
......................... DC1 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... DC1 passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=DC1,OU=Domain Controllers,DC=domainname,
CN=DC1,CN=Servers,CN=HQ,CN
=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domain
and backlink on CN=DC1,OU=Domain Controllers,DC=domainname,
are correct.
The system object reference (serverReferenceBL)
CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domain
and backlink on
CN=NTDS Settings,CN=DC1,CN=Servers
DC=domainname,DC=com
are correct.
......................... DC1 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom
Running enterprise tests on : domainname.com
Starting test: Intersite
Skipping site WAREHOUSE, this site is outside the scope provided by
the command line arguments provided.
Skipping site HQ, this site is outside the scope provided by the
command line arguments provided.
......................... domainname.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
PDC Name: \\dc2.domainname.com
Locator Flags: 0xe00003fd
Time Server Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\dc2.domainname.com
Locator Flags: 0xe00003fd
KDC Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
......................... domainname.com passed test FsmoCheck
Test omitted by user request: DNS
I ran dcdiag from the DC that I cannot snapin DNS, here is the result
C:\Documents and Settings\username>dcdiag.e
Domain Controller Diagnosis
Performing initial setup:
* Verifying that the local machine DC1, is a DC.
* Connecting to directory service on server DC1.
* Collecting site info.
* Identifying all servers.
* Identifying all NC cross-refs.
* Found 4 DC(s). Testing 1 of them.
Done gathering initial info.
Doing initial required tests
Testing server: HQ\DC1
Starting test: Connectivity
* Active Directory LDAP Services Check
* Active Directory RPC Services Check
......................... DC1 passed test Connectivity
Doing primary tests
Testing server: HQ\DC1
Starting test: Replications
* Replications Check
* Replication Latency Check
DC=ForestDnsZones,DC=domai
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
DC=DomainDnsZones,DC=domai
Latency information for 7 entries in the vector were ignored.
7 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
CN=Schema,CN=Configuration
Latency information for 10 entries in the vector were ignored.
10 were retired Invocations. 0 were either: read-only replic
s and are not verifiably latent, or dc's no longer replicating this nc. 0 had
o latency information (Win2K DC).
CN=Configuration,DC=doamin
Latency information for 9 entries in the vector were ignored.
9 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
DC=doaminname,DC=com
Latency information for 9 entries in the vector were ignored.
9 were retired Invocations. 0 were either: read-only replica
and are not verifiably latent, or dc's no longer replicating this nc. 0 had n
latency information (Win2K DC).
......................... DC1 passed test Replications
Test omitted by user request: Topology
Test omitted by user request: CutoffServers
Starting test: NCSecDesc
* Security Permissions check for all NC's on DC DC1.
* Security Permissions Check for
DC=ForestDnsZones,DC=domai
(NDNC,Version 2)
* Security Permissions Check for
DC=DomainDnsZones,DC=domai
(NDNC,Version 2)
* Security Permissions Check for
CN=Schema,CN=Configuration
(Schema,Version 2)
* Security Permissions Check for
CN=Configuration,DC=domain
(Configuration,Version 2)
* Security Permissions Check for
DC=domainname,DC=com
(Domain,Version 2)
......................... DC1 passed test NCSecDesc
Starting test: NetLogons
* Network Logons Privileges Check
Verified share \\DC1\netlogon
Verified share \\DC1\sysvol
......................... DC1 passed test NetLogons
Starting test: Advertising
The DC SDC0001 is advertising itself as a DC and having a DS.
The DC SDC0001 is advertising as an LDAP server
The DC SDC0001 is advertising as having a writeable directory
The DC SDC0001 is advertising as a Key Distribution Center
The DC SDC0001 is advertising as a time server
The DS SDC0001 is advertising as a GC.
......................... DC1 passed test Advertising
Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS Settings,CN=DC2,CN=Servers
es,CN=Configuration,DC=dom
Role Domain Owner = CN=NTDS Settings,CN=DC2,CN=Servers
es,CN=Configuration,DC=dom
Role PDC Owner = CN=NTDS Settings,CN=DC2,CN=Servers
CN=Configuration,DC=domain
Role Rid Owner = CN=NTDS Settings,CN=DC2,CN=Servers
CN=Configuration,DC=domain
Role Infrastructure Update Owner = CN=NTDS Settings,CN=SDC0002,CN=Ser
rs,CN=HQ,CN=Sites,CN=Confi
......................... DC1 passed test KnowsOfRoleHolders
Starting test: RidManager
* Available RID Pool for the Domain is 1723606 to 1073741823
* dc2.domainname.com is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1723106 to 1723605
* rIDPreviousAllocationPool is 1721106 to 1721605
* rIDNextRID: 1721360
......................... DC1 passed test RidManager
Starting test: MachineAccount
Checking machine account for DC SDC0001 on DC SDC0001.
* SPN found :LDAP/DC1.domainname.com/d
* SPN found :LDAP/DC1.domainname.com
* SPN found :LDAP/DC1
* SPN found :LDAP/DC1.domainname.com/d
* SPN found :LDAP/6774ce53-f724-4d3b-9
* SPN found :E3514235-4B06-11D1-AB04-0
91-afaeff8b5641/domainname
* SPN found :HOST/DC1.domainname.com/d
* SPN found :HOST/DC1.domainname.com
* SPN found :HOST/DC1
* SPN found :HOST/DC1.domainname.com/d
* SPN found :GC/DC1.domainname.com/dom
......................... DC1 passed test MachineAccount
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: w32time
* Checking Service: NETLOGON
......................... DC1 passed test Services
Test omitted by user request: OutboundSecureChannels
Starting test: ObjectsReplicated
DC1 is in domain DC=domainname,DC=com
Checking for CN=DC1,OU=Domain Controllers,DC=domainname,
domain DC=domainname,DC=com on 1 servers
Object is up-to-date on all servers.
Checking for CN=NTDS Settings,CN=DC1,CN=Servers
onfiguration,DC=domainname
com on 1 servers
Object is up-to-date on all servers.
......................... DC1 passed test ObjectsReplicated
Starting test: frssysvol
* The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
......................... DC1 passed test frssysvol
Starting test: frsevent
* The File Replication Service Event log test
......................... DC1 passed test frsevent
Starting test: kccevent
* The KCC Event log test
Found no KCC errors in Directory Service Event log in the last 15 minu
es.
......................... DC1 passed test kccevent
Starting test: systemlog
* The System Event log test
Found no errors in System Event log in the last 60 minutes.
......................... DC1 passed test systemlog
Test omitted by user request: VerifyReplicas
Starting test: VerifyReferences
The system object reference (serverReference)
CN=DC1,OU=Domain Controllers,DC=domainname,
CN=DC1,CN=Servers,CN=HQ,CN
=com
are correct.
The system object reference (frsComputerReferenceBL)
CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domain
and backlink on CN=DC1,OU=Domain Controllers,DC=domainname,
are correct.
The system object reference (serverReferenceBL)
CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domain
and backlink on
CN=NTDS Settings,CN=DC1,CN=Servers
DC=domainname,DC=com
are correct.
......................... DC1 passed test VerifyReferences
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: CheckSecurityError
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidatio
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : domainname
Starting test: CrossRefValidation
......................... domainname passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... domainname passed test CheckSDRefDom
Running enterprise tests on : domainname.com
Starting test: Intersite
Skipping site WAREHOUSE, this site is outside the scope provided by
the command line arguments provided.
Skipping site HQ, this site is outside the scope provided by the
command line arguments provided.
......................... domainname.com passed test Intersite
Starting test: FsmoCheck
GC Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
PDC Name: \\dc2.domainname.com
Locator Flags: 0xe00003fd
Time Server Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
Preferred Time Server Name: \\dc2.domainname.com
Locator Flags: 0xe00003fd
KDC Name: \\DC1.domainname.com
Locator Flags: 0xe00001fc
......................... domainname.com passed test FsmoCheck
Test omitted by user request: DNS
Premium Content
You need an Expert Office subscription to comment.Start Free Trial