We help IT Professionals succeed at work.

DNS issue Server 2008 Dell box

nicolausj
nicolausj used Ask the Experts™
on
I though everything was running perfectly then my DNS seemed to just stop on my now i'm getting errors on the best practice analyzer.

Error 1 : The network adapter Local Area Connection does not list the loopback IP address as a DNS server, or it is configured as the first entry.

The server ip address is the primary dns on it's nic, so I'm not sure why this one is appearing.

Error 2 : DNS: Zone _msdcs.spl.local is an Active Directory integrated DNS Zone and must be available.

I  though this would have transferred when I moved all of the FSMO Roles

I still have my old 2003 server DC still running on the network....
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Use 127.0.0.1 as your primary DNS on your NIC

Author

Commented:
Alright.... i did that... now i get the following error, and a whole bunch more
Title:
DNS: The DNS server 172.0.0.1 on Local Area Connection must resolve names in the primary DNS domain zone

Severity:
Error

Date:
17/05/2011 2:46:22 PM

Category:
Configuration

Issue:
The DNS server 172.0.0.1 on Local Area Connection did not successfully resolve the name for the start of authority (SOA) record of the zone hosting the computer's primary DNS domain name.

Impact:
Active Directory Domain Services (AD DS) operations that depend on locating domain controllers will fail.

Resolution:
Click Start, click Network, click Network and Sharing Center, and then click Change adapter settings to remove or replace all invalid or unresponsive DNS servers.

More information about this best practice and detailed resolution procedures: http://go.microsoft.com/fwlink/?LinkId=121973

Open in new window

127.0.0.1 not 172.0.0.1

Author

Commented:
... still a no go.

Author

Commented:
The network adapter Local Area Connection does not list the loopback IP address as a DNS server, or it is configured as the first entry.

Having the IP of the server as its primary DNS is what it's asking for.... I might need a reboot?
Top Expert 2012

Commented:
Look in your DNS console check to see if you have a msdcs.domain.com zone and\or you msdcs folder is grayed out under your domain.com zone.

The loopback address message can be ignored you do NOT want to have loopback address here at all.

Author

Commented:
The msdcs folder is not greyed out
Top Expert 2012

Commented:
Take a screenshot and post results.

Run dcdiag /fix post results

Author

Commented:
I'll post the results this afternoon...

Author

Commented:
Here it is..

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Administrator.SPL>dcdiag /fix

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SPL-DC
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\SPL-DC
      Starting test: Connectivity
         ......................... SPL-DC passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\SPL-DC
      Starting test: Advertising
         ......................... SPL-DC passed test Advertising
      Starting test: FrsEvent
         ......................... SPL-DC passed test FrsEvent
      Starting test: DFSREvent
         ......................... SPL-DC passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SPL-DC passed test SysVolCheck
      Starting test: KccEvent
         ......................... SPL-DC passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SPL-DC passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SPL-DC passed test MachineAccount
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=spl,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=spl,DC=local
         ......................... SPL-DC failed test NCSecDesc
      Starting test: NetLogons
         ......................... SPL-DC passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SPL-DC passed test ObjectsReplicated
      Starting test: Replications
         ......................... SPL-DC passed test Replications
      Starting test: RidManager
         ......................... SPL-DC passed test RidManager
      Starting test: Services
         ......................... SPL-DC passed test Services
      Starting test: SystemLog
         An error event occurred.  EventID: 0x00000457
            Time Generated: 05/18/2011   11:22:02
            Event String:
            Driver PrimoPDF required for printer PrimoPDF is unknown. Contact th
e administrator to install the driver before you log in again.
         ......................... SPL-DC failed test SystemLog
      Starting test: VerifyReferences
         ......................... SPL-DC passed test VerifyReferences


   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation

   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation

   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : spl
      Starting test: CheckSDRefDom
         ......................... spl passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... spl passed test CrossRefValidation

   Running enterprise tests on : spl.local
      Starting test: LocatorCheck
         ......................... spl.local passed test LocatorCheck
      Starting test: Intersite
         ......................... spl.local passed test Intersite

C:\Users\Administrator.SPL>

Author

Commented:
I'm not sure if this is related but saving files to the server is really really slow.
Top Expert 2012
Commented:
Update you network drivers.

Post ipconfig /all

Author

Commented:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Administrator.SPL>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SPL-DC
   Primary Dns Suffix  . . . . . . . : spl.local
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : spl.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) Gigabit ET Dual Port Server Adap
ter
   Physical Address. . . . . . . . . : 00-1B-21-74-6E-D4
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.xxx.xxx.200(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.xxx.xxx.100
   DNS Servers . . . . . . . . . . . : 127.0.0.1
                                       192.xxx.xxx.201
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{5CF94EEC-92C7-4100-A0CD-93797E4AB661}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

C:\Users\Administrator.SPL>
Top Expert 2012

Commented:
Remove 127.0.0.1 IP address it needs to have the actual IP address.

Author

Commented:
thats what i had....ShareefHuddle told me to put 127.0.0.1 in

I have changed it back

Author

Commented:
and I clearly missed your comment to remove it.... my apologies

Author

Commented:
Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=spl,DC=local
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=spl,DC=local
         ......................... SPL-DC failed test NCSecDesc

is this going to be an issue if I shut down my old DC? Im guessing not since this isn't a RODC, but i though i would double check before closing this.

Thanks
Top Expert 2012

Commented:
No issues

Author

Commented:
Thanks

Author

Commented:
Please award points to dariusg.... I was in a hurry and selected my own responce
Top Expert 2012

Commented:
You can now select the correct solution