Solved

AD BPA Windows 2008 - DNS Errors

Posted on 2010-09-08
9
302 Views
Last Modified: 2012-05-10
Hi,

I've running the new AD BPA Tool on my Windows Server 2008 R2 box and receiving about 20 errors relating to DNS.....even though DNS seems to be functioning perfectly internally

I've attahced a screen shot of the first error, can provide more if nessesary

These erorrs might be nothng to worry about asour domain/environemtn is working normally, but just a bit concerned about these BPA erorrs

Any help would be gretly appreciated

Thanks

Mike


Capture.JPG
0
Comment
Question by:MOSADMIN
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 33627260
Check this out.

http://technet.microsoft.com/en-us/library/dd723687(WS.10).aspx

Make sure you don't have a firewall blocking this.

I would run on your forest root DC.
0
 

Author Comment

by:MOSADMIN
ID: 33627491
Yeah I read through that document and Disabled the Firewall on this server.....but has had no effect

Also the DirectoryServices_EngineReport.xml hasn't been any help in determinign why all these 20 elements of the BPA seem to fail....
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33627859
Are you runn this on a DC? Have you tried running on another DC?

Run dcdiag look for errors.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:MOSADMIN
ID: 33627948
If I run DCDIAG /TEST:DNS on the DC inquestion if fails on the Delegation Test, but it's strange as it's referencing a really old DC which taken out of service a long time ago....


     TEST: Delegations (Del)
        Error: DNS server: castle.mos.local. IP:<Unavailable>
        [Missing glue A record]

I can't find any records of that old server (CASTLE) anywhere in DNS, AD Sites & Services, ADSI Edit etc!

If I run the same DCDIAG /TEST:DNS from another server if completes without any errors?!
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628089
Check to make sure that there are no SRV records.
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628092
0
 

Author Comment

by:MOSADMIN
ID: 33628357
I've been through DNS and removed any references to this old server (there were a few entires under the Reverse Lookup Zones)

Metadatacleanup (NTDSUTIIL) doesn't list this old server!
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 33628388
Did you go through the msdcs.domain.com zone?
0
 

Author Closing Comment

by:MOSADMIN
ID: 33755126
thanks
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question