I'm trying to add two new Windows 2008 Server R2 Standard edition servers to our domain. The only domain controller is a Windows 2003 Server. Neither 2008 servers could run DCPromo. Both showed the same error message:
Active Directory domain controller for the domain "XXXXX.local" could not be contacted. Ensure that the DNS domain name is typed correctly. If the name is correct, then click details for troubleshooting information.
The error was: "This operation returned because the timeout period expired." (error code 0x000005B4 ERROR_TIMEOUT):
The query was for the SRV record for _ldap.tcp.dc._msdcs.XXXXX.local.
The DNS servers used by this computer for name resolution are not responding. This computer is configured to use DNS servers with the following addresses:
Verify that this computer is connected to the network, that these are the correct DNS server IP addresses, and that at least one of the DNS servers is running.
Based on Googling and Expert-Exchanging I did, I decided to try dcdiag on the existing Windows 2003 Server. Here's the only negative result:
The host c0a4d630-de14-48f2-b648-4f9de7a9d655._msdcs.XXXXX.local could
not be resolved to an IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(c0a4d630-de14-48f2-b648-4f9de7a9d655._msdcs.XXXXX.local) couldn't be
resolved, the server name (NT2.XXXXX.local) resolved to the IP address
(192.168.1.10) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... NT2 failed test Connectivity
The Windows 2003 server has, from the day I inherited it 7 years ago, always put out a bunch of Event ID 7062 in the DNS log ("The DNS server encountered a packet addressed to itself."). I spoke to the guy who installed it, and he said that this was a common error and that nothing's wrong. Indeed, the Windows 2003 server has been cranking along flawlessly, except for that error message.
I tried the following to fix the problem:
(1) Made sure the DNS server pointed to itself as the preferred DNS server in the TCP/IP settings.
(2) Opened the DNS console and made sure there was a forward lookup zone with the same address as my domain.
(3) Set up a forwarder to point the my ISP's DNS.
(4) Stopped and restarted the net logon service and re-registered the SRV records.
(5) Made sure the DHCP option was set properly to provide clients with the IP address of the windows DNS server only.
(6) Ran "ipconfig /flushdns and ipconfig /registerdns
(7) Cleared the ARP cache with arp -d *
(8) ran dcdiag /fix
(9) net stop netlogon and then net start logon
(10) ran dcdiag /fix again.
Still getting the error in dcdiag and still can't dcpromo the two new servers. I'm stuck. Can anyone help me fix the DNS and/or DCPromo problem?