Windows guests not auto registering in DNS

Well seems like the systems can't contact the domain or DNS servers

I can successfully add to the domain in both AD's. I can successfully do nslookups in both AD Domains's from the problem guest (Not at the same time of course). The reason that I have tried it in two separate Domains is to rule out DNS on the Domain, which I have done.

Run dcdiag post results

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = XXXXXX-DOM50VW

   * Identified AD Forest.
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\XXXXXX-DOM50VW

      Starting test: Connectivity

         ......................... XXXXXX-DOM50VW passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\XXXXXX-DOM50VW

      Starting test: Advertising

         ......................... XXXXXX-DOM50VW passed test Advertising

      Starting test: FrsEvent

         ......................... XXXXXX-DOM50VW passed test FrsEvent

      Starting test: DFSREvent

         ......................... XXXXXX-DOM50VW passed test DFSREvent

      Starting test: SysVolCheck

         ......................... XXXXXX-DOM50VW passed test SysVolCheck

      Starting test: KccEvent

         ......................... XXXXXX-DOM50VW passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... XXXXXX-DOM50VW passed test

         KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... XXXXXX-DOM50VW passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=Domain,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=Domain,DC=local
         ......................... XXXXXX-DOM50VW failed test NCSecDesc

      Starting test: NetLogons

         ......................... XXXXXX-DOM50VW passed test NetLogons

      Starting test: ObjectsReplicated

         ......................... XXXXXX-DOM50VW passed test ObjectsReplicated

      Starting test: Replications

         ......................... XXXXXX-DOM50VW passed test Replications

      Starting test: RidManager

         ......................... XXXXXX-DOM50VW passed test RidManager

      Starting test: Services

         ......................... XXXXXX-DOM50VW passed test Services

      Starting test: SystemLog

         An error event occurred.  EventID: 0x00000457

            Time Generated: 03/14/2011   14:01:25

            Event String:

            Driver Dell Open Print Driver (PS) required for printer Dell 810par is unknown. Contact the administrator to install the driver before you log in again.

         An error event occurred.  EventID: 0x00000457

            Time Generated: 03/14/2011   14:01:33

            Event String:

            Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again.

         A warning event occurred.  EventID: 0x000016AF

            Time Generated: 03/14/2011   14:04:32

            Event String:

            During the past 4.06 hours there have been 69 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites.  The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes.  The current maximum size is 20000000 bytes.  To set a different maximum size, create the above registry value and set the desired maximum size in bytes.

         ......................... XXXXXX-DOM50VW failed test SystemLog

      Starting test: VerifyReferences

         ......................... XXXXXX-DOM50VW passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : Domain

      Starting test: CheckSDRefDom

         ......................... Domain passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Domain passed test CrossRefValidation

   
   Running enterprise tests on : Domain.local

      Starting test: LocatorCheck

         ......................... Domain.local passed test LocatorCheck

      Starting test: Intersite

         ......................... Domain.local passed test Intersite

Keep in mind that the 2008 R2 guest vm has the same registration problem on an entirely different AD Forest with its' own separate DNS.

During the past 4.06 hours there have been 69 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites.  The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes.  The current maximum size is 20000000 bytes.  To set a different maximum size, create the above registry value and set the desired maximum size in bytes.

Post this whole Event logs

How can it be related the a DC or DNS if I have the same problem on a completel different Active Directory Forest?

Can you run "ipconfig /registerdns" on the client that's failing to register in DNS (it requires elevation of rights) and check for any events in even viewer?
Can you also post output of "ipconfig /all" from your domain controllers. Also let us know what version of Windows are your DCs running.

Kris

ipconfig /registerdns doesn't generate any errors in the event logs and does not register my computer in DNS. I am running Windows 2008 R2. I have also tested with Windows XP SP3 and have the same issue.

As i appreciate the help I received, the solution was to disable DNS ALG on the Juniper FireWall (SRX).

I am glad you've nailed it down!