Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 524
  • Last Modified:

Domain joined server does not register with DNS

Hi Expert,

I am experiencing this frustrated issue which I could not figure out.

We recently had a few servers on 192.168.20.0/24 subnet joined the domain on 192.168.250.8/24 subnet.

I did not have problem join them to the domain expect receiving "Changing primary DNS name to .... failed. The name will remain...... The error is the specified domain either does not exist or could not be contacted.

Once these server were on the domain, they were not able to register themselves on the DNS server.

I have tried ipconfig/registerdns with no luck. Wireshark live monitor seems to stuck at dynamic update with domain controller.

Please advise.

Jimmy

0
jimmy1829
Asked:
jimmy1829
  • 10
  • 7
1 Solution
 
DaeltCommented:
can you ping your DNS server from the others?
0
 
jimmy1829Author Commented:
Yes, ping works fine between all servers
0
 
DaeltCommented:
what happens when you manually creater a pointer in your DNS to one of the server? Does it react normally after that?

Didn't you forget to change DNS adresses in the other servers NICs?
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
jimmy1829Author Commented:
I have not manually created any pointer. Shouldn't the server update themselves?

The DNS address looks fine under NIC property.
0
 
DaeltCommented:
Do you have DHCP server activated? did you set the DNS in the scope options?

Usually the DHCP register the machine into the DNS automatically.
But it can happen, even if you have DHCP server activated on the DNS server that static IP don't register themself.

That's why i usually prefer creating myself pointers to the other servers rather than waiting for an hypotetic self-register.
0
 
jimmy1829Author Commented:
Sorry, forget to mention. All these servers are statically configured.
0
 
DaeltCommented:
Sorry, forget to mention. All these servers are statically configured

Indeed! (not very usual to have servers with dynamic IPs)

Just read what i wrote just before, this is one of the reason that can explain why they dont register in the DNS.

Let's be more theorical with a microsoft definition :
"A computer that is configured to use Dynamic Host Configuration Protocol (DHCP) to obtain IP addresses can automatically register its IP address and Domain Name System (DNS) name with the DNS server that is authoritative for the zone that hosts its domain. This eliminates the need for an administrator to manage host (A or AAAA) resource records for client computers."

That means that if your secondary servers have DHCP client service disable and are set to static IP, they will hardly register themselves into your DNS server.

This is why you need to manually create pointers to avoid a mess.
0
 
jimmy1829Author Commented:
Thanks, when you say pointer, you mean in reverse lookup zone?

What about forward lookup zone?
0
 
jimmy1829Author Commented:
Actually there is one server that has dynamically registered successfully, and I have no idea how though.
0
 
DaeltCommented:
Just create manually A Hosts into your domain folder under your forward lookup zone and you won't have to worry anymore.
0
 
jimmy1829Author Commented:
thanks again.

So that means there is no dynamic way of doing this, correct?
0
 
DaeltCommented:
If dhcp service is not active on client side, not to my knowlegde
0
 
jimmy1829Author Commented:
actually DHCP service is running on client side, but we do not have DHCP server setup though
0
 
DaeltCommented:
You got the answer then
0
 
jimmy1829Author Commented:
thanks, actually I just setup another server within the same subnet as the domain controller, and that server does not have any issue register with DNS
0
 
jimmy1829Author Commented:
It ended up to be the Juniper firewall which actually blocked it
0
 
jimmy1829Author Commented:
No other accepted solutions
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 10
  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now