Solved

W2K DNS Fails, missing _msdcs, _sites, _tcp, _udp

Posted on 2010-09-01
5
1,128 Views
Last Modified: 2013-12-05
Several times over the past couple months the _msdcs, _sites, _tcp, _udp entries on our (DNS) domain controller for our domain become missing.  We have only one DNS server.  Once this happens users cannot access network resources.  If I do a netdisag /fix all the entries are recovered/rebuilt and users can then resume normal operation.

 What would cause this to happening?

One friend mentioned checking aging/scavenging.  It was enabled to scavenge stale resource records and set to 7 days.  Allow Dynamic Update was also set to "only secure updates"

I am disabling the scavenging and changing dynamic update to yes to see if this rectifies the problem or not.  Problem is the issue seems to be random.
0
Comment
Question by:PlazaProp
  • 2
  • 2
5 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 250 total points
ID: 33582386
It looks like this Microsoft article describes your problem:
http://support.microsoft.com/kb/310568/en-us
Is it one with which you are already familiar?
0
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 250 total points
ID: 33584300

Aging intervals: if Scavenging is enabled and the Refresh Interval is less than 24 hours you will find records disappear like this.

You do only need secure updates, although you should inspect the event log to see if events are logged about the server having trouble updating DNS.

If none of those help you may have to look at completely deleting then recreating the zone, it's not unheard of for zones to become corrupt and exhibit behaviour like this.

Chris
0
 
LVL 1

Author Comment

by:PlazaProp
ID: 33586826
Chris,  I had scavenging set to 7 days check back on my reports the first time this happened was 4 weeks ago on the same day of the week.  Coincidence?

I have check updates back to secure.

Razmus. I check out the MS KB and it sound exactly like that problem we are having.  One thing that I noticed after reading the article is that dynamic DNS updates on  the NIC was turned off.

We have 2 other forward lookup zones to do some static routing.  they do not have the _msdcs and other items.  I don't think they ever have.  They are not part of the AD domain.  This wouldn't cause an issue would it?
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 33587941
The other two lookup zones aren't on a different server for the same domain name, right?  (I assume they aren't, but just to articulate an assumption...)

Try the scavenging for a while, but if the problem reoccurs... I'd try turning DNS dynamic updates back on.   It sounds like Microsoft has acknowledged it as a known problem with Windows 2000, and they only offer the few possible fixes.
0
 
LVL 1

Author Comment

by:PlazaProp
ID: 33735081
Well,  The issue has not returned.  I had changed updates to secure and  "Scavenge Stale records" is unchecked.  The time length is set to 7 days but if the box is unchecked the time doesn't really matter.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have a multi-homed DNS setup in windows, you can have issues with connectivity to the server that hosts the DNS services (or even member servers of your domain if this same DNS server is a DC). This is because windows registers all of its IPs…
I will assume you are running a non-server version of some sort of Windows throughout this article. There are many flavors of Windows since Windows Server 2000 - 2008, XP Home & Pro, Vista Home & Pro, and Windows 7 Starter, Home, Pro, Ultimate, etc.…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now