We help IT Professionals succeed at work.

DNS working but unable to snapin

Ok, I found an employee attempting to enable Windows Deployment Services on my domain controller. I stopped it and had the process cancelled and ever since then I am running into issues with this Domain Controller.

The funny thisng is this. DNS is working on the DC. I can open DNS via my workstations Admin Tools but when you are on the DC and click DNS in Admin Tools it will not load the snapin. I have attempted to run MMC and snap it in manually but DNS is not an option. So far I have

1. Restarted the DC
2. Restarted the DNS Server service

Event Viewer shows DNS successfully performing zone transfers. So I am at a loss for what this is. I have read many topics but in each instance DNS wasn't working or it was someone did not know how to right click and add server, I do not get these options. DNSMGMT.MSC is in the system32 folder.

I had two event errors this morning but they cleared with a restart

Event Type:      Error
Event Source:      DNS
Event Category:      None
Event ID:      4015
Date:            6/15/2010
Time:            8:18:01 AM
User:            N/A
Computer:      DC1
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

and

Event Type:      Error
Event Source:      DNS
Event Category:      None
Event ID:      4004
Date:            6/15/2010
Time:            8:18:01 AM
User:            N/A
Computer:      DC1
Description:
The DNS server was unable to complete directory service enumeration of zone ..  This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it.  Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.
Comment
Watch Question

Commented:
You may try removing the Adminpak from the machine then reinstalling with the most update version of the adminpak you can find on microsofts website.

Author

Commented:
This is a domain controller, not a workstation with admin tools installed.
Hi,

Please run DCdiag /verbose and check for errors, paste the resultant output for further diagnosis.

Also was looking it upon Expert-Exchange forums, found the following link for reference:
http://www.experts-exchange.com/Networking/Protocols/DNS/Q_22901131.html
Also have a look at the following expert-exchange link, similar to your issue:
http://www.experts-exchange.com/Operating_Systems/Q_21634533.html

Author

Commented:
Thanks for the two links but they are not applicable to my situation, I have four DC's.

I ran dcdiag from the DC that I cannot snapin DNS, here is the result

C:\Documents and Settings\username>dcdiag.exe /v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine DC1, is a DC.
   * Connecting to directory service on server DC1.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 4 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: HQ\DC1
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... DC1 passed test Connectivity

Doing primary tests

   Testing server: HQ\DC1
      Starting test: Replications
         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=domainname,DC=com
               Latency information for 7 entries in the vector were ignored.
                  7 were retired Invocations.  0 were either: read-only replica
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had n
 latency information (Win2K DC).
            DC=DomainDnsZones,DC=domainname,DC=com
               Latency information for 7 entries in the vector were ignored.
                  7 were retired Invocations.  0 were either: read-only replica
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had n
 latency information (Win2K DC).
            CN=Schema,CN=Configuration,DC=domainname,DC=com
               Latency information for 10 entries in the vector were ignored.
                  10 were retired Invocations.  0 were either: read-only replic
s and are not verifiably latent, or dc's no longer replicating this nc.  0 had
o latency information (Win2K DC).
            CN=Configuration,DC=doaminname,DC=com
               Latency information for 9 entries in the vector were ignored.
                  9 were retired Invocations.  0 were either: read-only replica
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had n
 latency information (Win2K DC).
            DC=doaminname,DC=com
               Latency information for 9 entries in the vector were ignored.
                  9 were retired Invocations.  0 were either: read-only replica
 and are not verifiably latent, or dc's no longer replicating this nc.  0 had n
 latency information (Win2K DC).
         ......................... DC1 passed test Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC DC1.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=domainname,DC=com
            (NDNC,Version 2)
         * Security Permissions Check for
           DC=DomainDnsZones,DC=domainname,DC=com
            (NDNC,Version 2)
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=domainname,DC=com
            (Schema,Version 2)
         * Security Permissions Check for
           CN=Configuration,DC=domainname,DC=com
            (Configuration,Version 2)
         * Security Permissions Check for
           DC=domainname,DC=com
            (Domain,Version 2)
         ......................... DC1 passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         Verified share \\DC1\netlogon
         Verified share \\DC1\sysvol
         ......................... DC1 passed test NetLogons
      Starting test: Advertising
         The DC SDC0001 is advertising itself as a DC and having a DS.
         The DC SDC0001 is advertising as an LDAP server
         The DC SDC0001 is advertising as having a writeable directory
         The DC SDC0001 is advertising as a Key Distribution Center
         The DC SDC0001 is advertising as a time server
         The DS SDC0001 is advertising as a GC.
         ......................... DC1 passed test Advertising
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=HQ,CN=Si
es,CN=Configuration,DC=domainname,DC=com
         Role Domain Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=HQ,CN=Si
es,CN=Configuration,DC=domainname,DC=com
         Role PDC Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=HQ,CN=Sites
CN=Configuration,DC=domainname,DC=com
         Role Rid Owner = CN=NTDS Settings,CN=DC2,CN=Servers,CN=HQ,CN=Sites
CN=Configuration,DC=domainname,DC=com
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=SDC0002,CN=Serv
rs,CN=HQ,CN=Sites,CN=Configuration,DC=domainname,DC=com
         ......................... DC1 passed test KnowsOfRoleHolders
      Starting test: RidManager
         * Available RID Pool for the Domain is 1723606 to 1073741823
         * dc2.domainname.com is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 1723106 to 1723605
         * rIDPreviousAllocationPool is 1721106 to 1721605
         * rIDNextRID: 1721360
         ......................... DC1 passed test RidManager
      Starting test: MachineAccount
         Checking machine account for DC SDC0001 on DC SDC0001.
         * SPN found :LDAP/DC1.domainname.com/domainname.com
         * SPN found :LDAP/DC1.domainname.com
         * SPN found :LDAP/DC1
         * SPN found :LDAP/DC1.domainname.com/domain
         * SPN found :LDAP/6774ce53-f724-4d3b-9691-afaeff8b5641._msdcs.domainname.com

         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/6774ce53-f724-4d3b-9
91-afaeff8b5641/domainname.com
         * SPN found :HOST/DC1.domainname.com/domainname.com
         * SPN found :HOST/DC1.domainname.com
         * SPN found :HOST/DC1
         * SPN found :HOST/DC1.domainname.com/domainname
         * SPN found :GC/DC1.domainname.com/domainname.com
         ......................... DC1 passed test MachineAccount
      Starting test: Services
         * Checking Service: Dnscache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: RpcSs
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... DC1 passed test Services
      Test omitted by user request: OutboundSecureChannels
      Starting test: ObjectsReplicated
         DC1 is in domain DC=domainname,DC=com
         Checking for CN=DC1,OU=Domain Controllers,DC=domainname,DC=com in
domain DC=domainname,DC=com on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=DC1,CN=Servers,CN=HQ,CN=Sites,CN=
onfiguration,DC=domainname,DC=com in domain CN=Configuration,DC=domainname,DC
com on 1 servers
            Object is up-to-date on all servers.
         ......................... DC1 passed test ObjectsReplicated
      Starting test: frssysvol
         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... DC1 passed test frssysvol
      Starting test: frsevent
         * The File Replication Service Event log test
         ......................... DC1 passed test frsevent
      Starting test: kccevent
         * The KCC Event log test
         Found no KCC errors in Directory Service Event log in the last 15 minu
es.
         ......................... DC1 passed test kccevent
      Starting test: systemlog
         * The System Event log test
         Found no errors in System Event log in the last 60 minutes.
         ......................... DC1 passed test systemlog
      Test omitted by user request: VerifyReplicas
      Starting test: VerifyReferences
         The system object reference (serverReference)
         CN=DC1,OU=Domain Controllers,DC=domainname,DC=com and backlink on
         CN=DC1,CN=Servers,CN=HQ,CN=Sites,CN=Configuration,DC=domainname,D
=com
          are correct.
         The system object reference (frsComputerReferenceBL)
         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domainname,DC=com
         and backlink on CN=DC1,OU=Domain Controllers,DC=domainname,DC=com
         are correct.
         The system object reference (serverReferenceBL)
         CN=DC1,CN=Domain System Volume (SYSVOL share),CN=File Replication
ervice,CN=System,DC=domainname,DC=com
         and backlink on
         CN=NTDS Settings,CN=DC1,CN=Servers,CN=HQ,CN=Sites,CN=Configuration
DC=domainname,DC=com
         are correct.
         ......................... DC1 passed test VerifyReferences
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidatio

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidatio

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : domainname
      Starting test: CrossRefValidation
         ......................... domainname passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... domainname passed test CheckSDRefDom

   Running enterprise tests on : domainname.com
      Starting test: Intersite
         Skipping site WAREHOUSE, this site is outside the scope provided by
         the command line arguments provided.
         Skipping site HQ, this site is outside the scope provided by the
         command line arguments provided.
         ......................... domainname.com passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\DC1.domainname.com
         Locator Flags: 0xe00001fc
         PDC Name: \\dc2.domainname.com
         Locator Flags: 0xe00003fd
         Time Server Name: \\DC1.domainname.com
         Locator Flags: 0xe00001fc
         Preferred Time Server Name: \\dc2.domainname.com
         Locator Flags: 0xe00003fd
         KDC Name: \\DC1.domainname.com
         Locator Flags: 0xe00001fc
         ......................... domainname.com passed test FsmoCheck
      Test omitted by user request: DNS
Hi,
Please try re-registering this dll:
regsvr32 %windir%\system32\dnsmgr.dll and check if the DNS snap-in launches or not.

Author

Commented:
You sir are a God walking amongst mere mortals! Worked!

Author

Commented:
A+++++++
Hi dswope79:
I am no God, even i am studying just like you...
Good to know it worked.