DNS cache problem (appears to be client side)

I provide IT support for several small to medium sized business.  One thing I've noticed is that with 2 of the larger clients - workstations will periodically suffer from what appears to corrupt DNS Cache.  This is only when resolving non internet hostnames.  Each client has several remote sites but this problem occures randomly on both WInXP and 7 workstations.  

Symtpoms: "I can't log into Exchange - it shows disconnecte" or "I can't access the AS400"
Solution: ipconfig /flushdns and ipconfig /registerdns

if I do an nslookup, the server resolves the hostname no problem.

I get 1-2 calls that require this fix per month but I can't find a single thing about this on the internet.

Advise anyone?
GDavis193Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

WalrusSoupCommented:
I take it you have already reset the TCP\IP stacks and the winsock stacks on both of these machines?
0
Dirk KotteSECommented:
if ipconfig /flushdns solves your problem...
you can display the local dns cache with
ipconfig /displaydns
save the result and compare it with the result after /flushdns

if ipconfig /registerdns solves your problem...
are the DNS entries for the client at the DNS-server (forward and backward) correct before calling /registerdns?
 
0
AlanConsultantCommented:
You cuold always just treat the symptoms (not ideal) by putting:

ipconfig /flushdns

into their login script.

:-)

Alan.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

GDavis193Author Commented:
Still same problem - I've reset TCPIP and Winsock/2 and I still have users who occasional don't resolve a hostname.  ipconfig /displaydns shows no entry for the local hostname but NSLOOKUP resolves it just fine.

Pulling my hair out here....
0
Dirk KotteSECommented:
what do you mean with "I still have users who occasional don't resolve a hostname"
thes user-devices cant resolved by nslookup (forward/backward) or these clients have problems resolving (different?) hostnames (local/ping/nslookup/../ fqhn or netbios-name?)

the own systemname should not be present within the local dns-cache.
are the problem-clients able to resolve the "not working" hostames with nslookup - if not please post the answer message.


 
0
GDavis193Author Commented:
Symptom: User can't connect to Exchange, timeforce (their web based time clock system) etc.

Solution: ipconfig /flushdns and /registerdns

Troubleshooting shows this:  For some reason, hostnames on the LAN are no longer resolving.  It's not ALL hostnames (servers in this example), sometimes it's just one or two.  When this occurs, running an NSLOOKUP brings up the DNS server and it resolves the hostname no problem.  The clients DNS cache shows missing IP entries for the hostname.

So yes, nslookup works but ping fails.  The clients 'forget' about these hostname/IP resolution randomly.  
0
Dirk KotteSECommented:
do you use working with the "hosts" file at these workstations?
there are known buffer problems within Win2003 and possible Windows XP/7 also.
are there "many" entries within the DNS-cache?
0
jiggyflyCommented:
you could edit the host file to include a static mapping, that is a workaround but not a fix. Are the servers multihomed?  Do you have offline files enabled on the clients? Try turning this off.When a client is affected what ip address is listed when you ping the mail server? Are your clients DHCP? Where are they getting DNS? Check the DNS server itself. Do you have the DHCP server offering a WINNS server as well?
0
GDavis193Author Commented:
I would prefer to not edit the HOSTS file.  

Yes there are man entries in the DNS cache.

Offlinefiles = no

I did notice one thing - they have public DNS names listed for the same internal hostnames.  I know I didn't explain that well so let me clarify.

server hostname: mail.domainname.com
internal IP: 192.168.1.10
nslookup resolves mail.domainname.com to 192.168.1.10

They also have public DNS pointing to a puiblic address (ie 67.137.xx.xx) so:
A record = mail.domainname.com 67.137.xx.xx

when the local DNS cache fails, when i ping mail.domainname.com I get the public IP.  So for a week it was resolving the internal IP address as desired but at some point it failed and resolved the public IP and kept it.  This also explains why hostnames with NO public DNS record simply fail to resolve anything.

For some reason they are losing connectivity to the internal DNS server and when the cache expires it's unable resolve properly?  Hmm.... is there a way to have the local DNS service refresh the internal DNS cache more often?

0
GDavis193Author Commented:
I forgot to add: DHCP for IP and DNS.
no WINNS server
0
Dirk KotteSECommented:
why you dont use wins?
our domain-guys mostly install wins because it is simple, quick (and should solve your problem)
ok thats only a workaround ...
 
0
jiggyflyCommented:
do you have the primary dns server hard coded to an external server? You should have the replication partner the first entry then the loopback as the secondary 127.0.0.1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GDavis193Author Commented:
Problem resolved by discovering a Name server entry in DNS pointing to an old decomissioned server.  Removed it and it appears to bo working thus far.

Points given for effort.
0
GDavis193Author Commented:
Appreciate the help - answered my oqn question.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.