Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

can't open DNS on Server 2008

Posted on 2013-01-10
15
Medium Priority
?
1,684 Views
Last Modified: 2013-01-22
Client has a domain that was originally built with a 2003 domain controller. Later a 2008 R2 DC was added. They're having random issues with mapping drives. You can ping the server by name, fqdn and IP without issue. I've found that I cannot open DNS on the 2008 DC. When DNS opens, I try to add the local machine and it fails with "Access was denied. Would you like to add it anyway". Obviously the console will open but is useless to me. All of the FSMO roles are on the 2008 DC.
0
Comment
Question by:argroup
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
15 Comments
 
LVL 1

Expert Comment

by:ITConsultantChi
ID: 38764213
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e2369a4f-2001-4d4f-83cf-040f0d91e412

1. Open "hosts' file from c:\windows\system32\drivers\etc\ folder in notepad
2. Make sure that the IPv4 and IPv6 loop back address are present in the file, if not add it as below
   127.0.0.1       localhost
   ::1             localhost
3. Save and close the file.
4. Open services console and restart the dnsclient service and DNS server service
5. Now open the DNS management console
0
 

Author Comment

by:argroup
ID: 38764223
The lines do exist in the hosts file but the issue remains.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764236
what is your network connection DNS pointing to?
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:argroup
ID: 38764244
I've tried to point its own DNS setting to itself and to the other DC with a flush/renew after each change to no avail.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764376
first check if you have any repliciation issue

repadmin /replsum

this command will own show the replication summary
0
 

Author Comment

by:argroup
ID: 38764577
The failure shows "The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime"
0
 

Author Comment

by:argroup
ID: 38764588
The two DCs are showing the correct time and time zone.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764732
does it contains all the FSMO?

netdom query /domain:DOMAINNAME fsmo
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764737
are they on the same site/subnet?
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764760
To resolve this issue demote a Domain Controller forcefully "DCPROMO /FORCEREMOVAL" and perform metadata cleanup and remove failed DC's records from AD.
 
If the problem domain controller currently holds one or more operations master roles, seize the operations master roles to another healthy domain controller before demoting it.

and this is pain in the a**
0
 

Author Comment

by:argroup
ID: 38764764
The server with the issue holds all of the FSMO roles. There is only one subnet in this environment.
0
 
LVL 14

Accepted Solution

by:
Justin Yeung earned 2000 total points
ID: 38764780
run dcdiag /d and see which server is actually having problem..............

i will say it is probably the 2008 server since it is the one that got problem...........

try if you can move the roles back to 2003 server or a new 2008 DC.......

then dcpromo the problem one from the domain.
0
 

Author Comment

by:argroup
ID: 38764783
The 2008 server is one dcdiag says is the issue. I will build a new DC tomorrow and get back to you
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764898
good luck!
0
 

Author Closing Comment

by:argroup
ID: 38805348
Demoting and promoting the DC with the DNS issues seems to have resolved the issues.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question