Solved

2 Problem

Posted on 2011-02-22
21
368 Views
Last Modified: 2012-05-11
Hi all
I have 2 problem that i will be needing your help
I have network 6 server (2 DC's (one virtual server)& 4 applications server)& 3 workstations (all fixed LAN ip)
Problem 1:
DNS problem, when i do from the workstations & application server simple dns query i receive the fallowing error (see picture 1).
 NSLOOKUP - Problem 1
Problem 2:
In the workstations i receive error 1054 & the group policy don't implemented.
(See picture 2)
 Group Policy - Problem 2
Thenx
Tal
0
Comment
Question by:IT_Group1
21 Comments
 

Author Comment

by:IT_Group1
ID: 34950603
I forget to write that the domain is 2008 R2
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34950639
Strange DNS IP address (not private). Looks like public. All DNS server on clients should point to internal DNS servers. PLease ensure that you didn't make mistake )6 is near 7) during DNS set up (DHCP or statically)

Regards,
Krzysztof
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950641
are the DNS servers for your domain operational ?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 20

Expert Comment

by:woolnoir
ID: 34950645
and what is providing your clients with DNS information, DHCP ? is this set correctly with the DNS servers for your AD domain (generally the DC's ).
0
 

Author Comment

by:IT_Group1
ID: 34950684
iSiek:
Strange DNS IP address (not private). Looks like public. All DNS server on clients should point to internal DNS servers. PLease ensure that you didn't make mistake )6 is near 7) during DNS set up (DHCP or statically)

Regards,
Krzysztof

The IP range of the lan 172.17.100.0 full class c

woolnoir:
are the DNS servers for your domain operational ?

[b] Yes [/b]

and what is providing your clients with DNS information, DHCP ? is this set correctly with the DNS servers for your AD domain (generally the DC's ).

All the lan are fixed ip & i double checked the dns setting - all defined correctly

0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950695
start nslookup, and then once started (and you will get the above error message) type the name of one of your DC's just to verify that it isnt providing resolution.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950700
Do client machines have FW software installed ? try switching off and testing nslookup too.. just to check it isnt stopping DNS requests.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950706
And does the server have any FW enabled ? (the DC/DNS if they are the same ? )
0
 

Author Comment

by:IT_Group1
ID: 34950708
woolnoir:
start nslookup, and then once started (and you will get the above error message) type the name of one of your DC's just to verify that it isnt providing resolution.

The problem is appending in the init start of the nslookup if you try to resolve it working.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950716
run a DCDIAG on the DC and paste the results..
0
 

Author Comment

by:IT_Group1
ID: 34950722
woolnoir:
Do client machines have FW software installed ? try switching off and testing nslookup too.. just to check it isn't stopping DNS requests.
And does the server have any FW enabled ? (the DC/DNS if they are the same ? )

on all the machines the firewall is disabled
the DC/DNS 2 machines
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950735
cool - the DCDIAG should identify any DNS or domain issues... lets see the output :)
0
 

Author Comment

by:IT_Group1
ID: 34950797
The DCDIAG Result
DCDIAG
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34950836
it would have been better to give us it in text format, i.e

dcdiag > output.txt

and post that...

Does it give any errors at all ?
0
 

Author Comment

by:IT_Group1
ID: 34950910
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34951156
have you installed updates recently ? or made any configuration changes to the BDC or DC ?
0
 

Author Comment

by:IT_Group1
ID: 34951300
This a closed lan not connected to the world
no changes as been made between the DC's
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34952193
Anything in the event log on the DC ? the DCDiag is suggesting that the KDC is having issues.
0
 
LVL 3

Accepted Solution

by:
InterframeGap earned 500 total points
ID: 34960755
Hey-
Ok - I'll give this idea a try-

So from a workstation you get a timeout when starting an nslookup cmd prompt:

nslookup -querytype=ptr -timeout=5 172.17.100.100 >>  %TEMP%\w1-date-of-test1.txt

1) 172.16.0.0-172.31.0.0 is part of rfc1918 and is fine for use.  172.16/12, 10/8, 192.168/16 are the private address ranges.
2) the workstation is complaining about a missing PTR record.  So-
3) lets see about getting dns resolved and then deal with the other errors from the dcdiag etc.

=========CUT below and past into a dos window send us the file=================

echo "Start cut"
echo ""
echo "==================================">>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
echo %COMPUTERNAME% >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
nbtstat -an >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
set >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
net view \\172.17.100.100 >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
net use  \\172.17.100.100 >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
date /t >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
ipconfig /all >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
nbtstat -c >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
ipconfig /displaydns >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
echo "end cut"

6) On the SOA (Primary DNS Server) - If you have a master/slave setup (2 DCs with DNS) run the command on both

echo "Start cut"
echo ""
echo "==================================">>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
echo %COMPUTERNAME% >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
nslookup -querytype=ptr -timeout=5 172.17.100.100 >>  %TEMP%\w1-date-of-test1.txt
nslookup -querytype=ptr -timeout=5 127.0.0.1 >>  %TEMP%\w1-date-of-test1.txt
nslookup -querytype=soa -timeout=5 172.17.100.100 >>  %TEMP%\w1-date-of-test1.txt
nslookup -querytype=ns -timeout=5 172.17.100.100 >>  %TEMP%\w1-date-of-test1.txt
nbtstat -an >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
set >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
net view \\172.17.100.100 >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
net use  \\172.17.100.100 >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
date /t >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
ipconfig /all >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
nbtstat -c >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
ipconfig /displaydns >>%TEMP%\%COMPUTERNAME%-date-of-test1.txt
echo "end cut"


I hope the above works with no mistakes.  I'm just looking at how the network is configured and the dns and workstation setup.  This may help us, that is the hope.  
Please send the files - if needed remove any confidential data -

Douglas
0
 

Author Comment

by:IT_Group1
ID: 34967711
0
 

Author Comment

by:IT_Group1
ID: 34967714
I didnt see any kdc problem in the eventlog
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In-place Upgrading Dirsync to Azure AD Connect
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question