Solved

DNS Issues

Posted on 2011-03-25
5
259 Views
Last Modified: 2012-05-11
I have an old 2000 Server acting as the DC.  I have two additional servers 2000 and 2003 also running active directory.  I have introduced a 2008 server which will be replacing both the 2000 servers.  I have done all the adprep work, ran dcpromo created the DNS role as directed when running the dcpromo, (did not add a forwarding zone because not quite clear what that does) and did all the role transfers.  The 2000 server has DNS running and the 2008 has DNS running.

All the workstations have static ip's and they where first pointing to the old server now they are directed to the new server. I have no login issues or login script issues and everyone can access data on the new server without issues.

Once I finished making the changes to the static DNS on the workstations, I turned off the DNS service on the old server and have been running fine for the last week.  Today I introduced a new computer I assigned it a static IP with the DNS pointing to the new server and when I tried to join the domain, I keep getting messages that the DNS cannot resolve the domain name.  I can ping both the ip address and the server name without problems.  When I started the old DNS service and changed the DNS ip to reflect the old DC server it popped in just fine.

I am confused.  Any suggestions.

Thanks
0
Comment
Question by:imajava
  • 2
  • 2
5 Comments
 
LVL 38

Accepted Solution

by:
Adam Brown earned 500 total points
ID: 35219575
What FSMO roles do you have assigned to the Windows 2000 server?
0
 

Author Comment

by:imajava
ID: 35219941
I transferred the 4 roles from the 2000 server using the ntdcutil.exe.  Should I use the snap-in tools and check to see if the roles where transferred?
0
 
LVL 38

Assisted Solution

by:Adam Brown
Adam Brown earned 500 total points
ID: 35219943
Yes. Make sure that it has none of the 5. You'll also want to check Active Directory Sites and Services to make sure that the Windows 2000 server is not listed as the primary server for your site.
0
 

Author Comment

by:imajava
ID: 35219944
The 2000 server was the very first so I am assuming all roles where present on the server
0
 
LVL 1

Expert Comment

by:vagedis23
ID: 35220035
All FSMO´s were still on your old DC, The primary- ad integrated DNS Forward zone is required for active directory. I recommend using DHCP for your client PCs, so they can securely and dynamically register in the DNS zone.
Because the rid-master role was still on your old DC, a new computer account could not be created, so it could not join the domain.
You could remove Active directory from the old dc by running dcpromo.exe on it, all FSMO´s will automatically be moved to the new DC in your network.
 
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now