Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How can I Fix DNS entries

Posted on 2011-04-26
9
Medium Priority
?
669 Views
Last Modified: 2012-06-21
I have been given the task of fixing out DNS server... I need to promote this DC to a new server so I want to fix everything first.  I am learning as I go along...

First question I have is based on the image attached.  There are duplicate Host entries pointing to a single IP address.  Some of the Host entries do not even exist anymore.

I am not sure if the last person set this up manually or dynamic.  I'm wondering if this could cause problems and how to fix it.  I was also wondering if there is a Support Tool I can use to automatically fix DNS entries or tell me what needs to be fixed before I start the DC promotion process.


DNS-Forward.JPG
0
Comment
Question by:handyjay
  • 5
  • 4
9 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 35472509
You can have multiple Host(A) records pointing to the same IP address without issue.  What you cannot have without issue is multiple IP address pointing to the same hostname. :)  Those records could be manual or dynamic, depending on how they were set up.  Have you looked to see?  As far as DNS health, your best friend is

DCDIAG /test:DNS

Other useful tools:

NSLOOKUP
DNSCMD

Have you any experience with these?

DrUltima
0
 

Author Comment

by:handyjay
ID: 35475295
I do not know how to tell if it was setup manual or dynamic.... can you tell me how?  I assume dynamic as the person pretty much always took the easiest route in setting up computers systems.

As far as tools, I have not used them but am currently watching some videos about AD troubleshooting techniques.

I have attached another screen shot.  The first is the Forward lookup and the new one is the reverse lookup.

Look at IP xxx. 16 (for example) the forward and the reverse do not match up.

Also IP .7 on the reverse does not exist in the forward.

Both of these IPs have caused issues with our firewall software and seems to be the reason I was searching for issues in the wrong place.

Is there a safe way to "reset" it and let it fix itself... or will this cause more issues?
dnsReverse.JPG
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 2000 total points
ID: 35475458
You need to make sure your Zones are Active Directory Integrated and Allow Dynamic Updates.  For help on that, see this article:

http://technet.microsoft.com/en-us/library/cc740122%28WS.10%29.aspx

You also need to insure DNS scavenging is enabled.  This will get rid of old, stale records:

http://technet.microsoft.com/en-us/library/cc759204%28WS.10%29.aspx

Your easiest and fastest way for correction on duplicates is to delete the bad entry.  Sometimes that is a little trickier to determine.

DrUltima
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 

Author Comment

by:handyjay
ID: 35476854
These sound like they will help me with my issue.

I was wondering (see new screen shot), do you have any idea why I don't have a "General" tab as the Microsoft instructions indicate I should navigate too?
DNSCapture.JPG
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 35476922
That screenshot is from Server 2003, right?  What is the article you are referencing?  That looks right to me, but I don't have a Server 2003 with DNS installed on it to check.

DrUltima
0
 

Author Comment

by:handyjay
ID: 35476977
Yes it is 2003.  The article I am refereing too is the Allow dynamic updates.  The instructions are pretty simple... just dont see "General" tab.

I was going to use Command line, but I wanted to see what it was set now first, just to see where I stand before I make a change.


Allow dynamic update instructions:

1. Open DNS.
2. In the console tree, right-click the applicable zone, and then click Properties.
3. On the General tab, verify that the zone type is either Primary or Active Directory-integrated.
4. In Dynamic Updates, click Nonsecure and secure.


0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 35477005
Gotcha... You need to have the Zone highlighted, not the root of your domain, as this picture indicates... :)
0
 

Author Closing Comment

by:handyjay
ID: 35477124
Thanks, scavaging was off.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 35477197
Glad you found that and it is working for you.  If you have future issues related to this, you can always come back to this Question and "Ask a Related Question".  Doing so will notify all experts who are monitoring this thread as well as any in the Zones you place your new Question.

Best of luck!

DrUltima
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most DNS problems are VERY easily troubleshot and identifiable if you can follow the steps a DNS query takes. I would like to share the step-by-step a DNS query takes from the origin to the destination. _____________________________________________…
One of the most often confused topics in the area DNS is the idea of GLUE records. Specifically, what they are, when they are needed, when they are provided, and how they are created. First, WHAT IS GLUE? To understand GLUE, you must first under…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
The Relationships Diagram is a good way to get an overall view of what a database is keeping track of. It is also where relationships are defined. A relationship specifies how two tables connect to each other. As you build tables in Microsoft Ac…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question