Solved

AD BPA Windows 2008 - DNS Errors

Posted on 2010-09-08
9
298 Views
Last Modified: 2012-05-10
Hi,

I've running the new AD BPA Tool on my Windows Server 2008 R2 box and receiving about 20 errors relating to DNS.....even though DNS seems to be functioning perfectly internally

I've attahced a screen shot of the first error, can provide more if nessesary

These erorrs might be nothng to worry about asour domain/environemtn is working normally, but just a bit concerned about these BPA erorrs

Any help would be gretly appreciated

Thanks

Mike


Capture.JPG
0
Comment
Question by:MOSADMIN
  • 5
  • 4
9 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 33627260
Check this out.

http://technet.microsoft.com/en-us/library/dd723687(WS.10).aspx

Make sure you don't have a firewall blocking this.

I would run on your forest root DC.
0
 

Author Comment

by:MOSADMIN
ID: 33627491
Yeah I read through that document and Disabled the Firewall on this server.....but has had no effect

Also the DirectoryServices_EngineReport.xml hasn't been any help in determinign why all these 20 elements of the BPA seem to fail....
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33627859
Are you runn this on a DC? Have you tried running on another DC?

Run dcdiag look for errors.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:MOSADMIN
ID: 33627948
If I run DCDIAG /TEST:DNS on the DC inquestion if fails on the Delegation Test, but it's strange as it's referencing a really old DC which taken out of service a long time ago....


     TEST: Delegations (Del)
        Error: DNS server: castle.mos.local. IP:<Unavailable>
        [Missing glue A record]

I can't find any records of that old server (CASTLE) anywhere in DNS, AD Sites & Services, ADSI Edit etc!

If I run the same DCDIAG /TEST:DNS from another server if completes without any errors?!
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628089
Check to make sure that there are no SRV records.
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628092
0
 

Author Comment

by:MOSADMIN
ID: 33628357
I've been through DNS and removed any references to this old server (there were a few entires under the Reverse Lookup Zones)

Metadatacleanup (NTDSUTIIL) doesn't list this old server!
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628388
Did you go through the msdcs.domain.com zone?
0
 

Author Closing Comment

by:MOSADMIN
ID: 33755126
thanks
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question