Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

can't open DNS on Server 2008

Posted on 2013-01-10
15
Medium Priority
?
1,799 Views
Last Modified: 2013-01-22
Client has a domain that was originally built with a 2003 domain controller. Later a 2008 R2 DC was added. They're having random issues with mapping drives. You can ping the server by name, fqdn and IP without issue. I've found that I cannot open DNS on the 2008 DC. When DNS opens, I try to add the local machine and it fails with "Access was denied. Would you like to add it anyway". Obviously the console will open but is useless to me. All of the FSMO roles are on the 2008 DC.
0
Comment
Question by:argroup
  • 7
  • 7
15 Comments
 
LVL 1

Expert Comment

by:ITConsultantChi
ID: 38764213
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e2369a4f-2001-4d4f-83cf-040f0d91e412

1. Open "hosts' file from c:\windows\system32\drivers\etc\ folder in notepad
2. Make sure that the IPv4 and IPv6 loop back address are present in the file, if not add it as below
   127.0.0.1       localhost
   ::1             localhost
3. Save and close the file.
4. Open services console and restart the dnsclient service and DNS server service
5. Now open the DNS management console
0
 

Author Comment

by:argroup
ID: 38764223
The lines do exist in the hosts file but the issue remains.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764236
what is your network connection DNS pointing to?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:argroup
ID: 38764244
I've tried to point its own DNS setting to itself and to the other DC with a flush/renew after each change to no avail.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764376
first check if you have any repliciation issue

repadmin /replsum

this command will own show the replication summary
0
 

Author Comment

by:argroup
ID: 38764577
The failure shows "The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime"
0
 

Author Comment

by:argroup
ID: 38764588
The two DCs are showing the correct time and time zone.
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764732
does it contains all the FSMO?

netdom query /domain:DOMAINNAME fsmo
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764737
are they on the same site/subnet?
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764760
To resolve this issue demote a Domain Controller forcefully "DCPROMO /FORCEREMOVAL" and perform metadata cleanup and remove failed DC's records from AD.
 
If the problem domain controller currently holds one or more operations master roles, seize the operations master roles to another healthy domain controller before demoting it.

and this is pain in the a**
0
 

Author Comment

by:argroup
ID: 38764764
The server with the issue holds all of the FSMO roles. There is only one subnet in this environment.
0
 
LVL 14

Accepted Solution

by:
Justin Yeung earned 2000 total points
ID: 38764780
run dcdiag /d and see which server is actually having problem..............

i will say it is probably the 2008 server since it is the one that got problem...........

try if you can move the roles back to 2003 server or a new 2008 DC.......

then dcpromo the problem one from the domain.
0
 

Author Comment

by:argroup
ID: 38764783
The 2008 server is one dcdiag says is the issue. I will build a new DC tomorrow and get back to you
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 38764898
good luck!
0
 

Author Closing Comment

by:argroup
ID: 38805348
Demoting and promoting the DC with the DNS issues seems to have resolved the issues.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question