asked on

Slow domain resolution on Server 2008r2

We recently installed a server running Server 2008r2, with DNS and AD for about 10 users (on a fast machine). Since that installation, all users get "Resolving Host..." when they try to get to any website, then a couple of seconds of delay, then the website loads.

I'd like to get the delay out of the process, but this isn't my area of expertise, so any troubleshooting or suggestions would be appreciated.

SOLUTION

Jaroslav Latal

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Member_2_6492660_1

Have you ever run this

dcdiag >dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDN HERE>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt

Lets see if DNS is working

piattnd

How long do nslookup queries take to come back?

From a client machine:

-Start > Run > CMD
-type "nslookup google.com"

How long does it take for that to bring results back? Is the IP address or server name of the server it looked at the new server you're troubleshooting?

lherrou

ASKER

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   Home Server = <SERVERNAME>

   * Identified AD Forest. 
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\<SERVERNAME>

      Starting test: Connectivity

         The host

         76a85aa4-f4ab-4033-828f-bcb4ff8ec654._msdcs.<DOMAIN>.local could

         not be resolved to an IP address. Check the DNS server, DHCP, server

         name, etc.

         Got error while checking LDAP and RPC connectivity. Please check your

         firewall settings.

         ......................... <SERVERNAME> failed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\<SERVERNAME>

      Skipping all tests, because server <SERVERNAME> is not responding to

      directory service requests.

Open in new window

(I changed actual server name to <SERVERNAME> and actual domain to <DOMAIN> to preserve anonymity)

lherrou

ASKER

>> How long do nslookup queries take to come back?

DNS request timed out
timeout was 2 seconds
Server: unknown
Address: <IP ADDRESS OF SERVER>

Jaroslav Latal

Did you read my post?

ASKER CERTIFIED SOLUTION

lherrou

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Member_2_6492660_1

didn't the dcdiag help you out determining the problem I see in the results that it said to check your dns

Member_2_6492660_1

Also I wrote a script that backs up DNS and emails me the report on a weekly basis.
If you are interested let me know

lherrou

ASKER

trgrassijr55, thank you. You are right that your dcdiag confirmed that it said to check DNS, which also was a pointer to the problem.

Also, I am interested in your script... would you be willing to write an article for EE and present it that way? It'll get you some points and get it seen by a much broader audience. And as one of EE's article editors, I'd be happy to work with you to get it published.

Member_2_6492660_1

Here is the script you just need to modify your names and drives
I schedule this weekly
Also use a program febooti which is a batch command line smtp email program works great

@echo off

for /f "tokens=2-4 delims=/ " %%a in ('date /t') do (set mydate=%%c-%%a-%%b)
for /f "tokens=1-2 delims=/: " %%a in ("%TIME%") do (set mytime=%%a-%%b)

md e:\dns\%mydate%_%mytime%

dnscmd /enumrecords our.network.mydomnet.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsontc.txt

dnscmd /enumrecords mydomnet.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomnet.txt

dnscmd /enumrecords sharepointmydom.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnssharepoint.txt

dnscmd /enumrecords mydom.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydom.txt

dnscmd /enumrecords mydomtest.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomtest.txt

dnscmd /enumrecords _msdcs.our.network.mydomnet.com @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmsdcs.txt

dnscmd /enumrecords 69.168.192.in-addr.arpa @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsrlz.txt

dnscmd /ZoneExport our.network.mydomnet.com dnsontc.%mydate%_%mytime%.dns

dnscmd /ZoneExport mydomnet.com dnsmydomnet.%mydate%_%mytime%.dns

dnscmd /ZoneExport sharepointmydom.com dnssharepoint.%mydate%_%mytime%.dns

dnscmd /ZoneExport mydom.com dnsmydom.%mydate%_%mytime%.dns

dnscmd /ZoneExport mydomtest.com dnsmydomtest.%mydate%_%mytime%.dns

dnscmd /ZoneExport _msdcs.our.network.mydomnet.com dnsmsdcs.%mydate%_%mytime%.dns

dnscmd /ZoneExport 1.168.192.in-addr.arpa dnsrlz.%mydate%_%mytime%.dns

cd \windows\system32\dns

move *.%mydate%_%mytime%.dns e:\dns\%mydate%_%mytime%\

C:\util\febooti\febootimail -from admin02@mydomnet.com -to mer@mydomnet.com -msg "DNS Network Status" -subj "DNS Backup" -dontupdate -attach E:\dns\%mydate%_%mytime%\*.txt -smtp 192.168.1.26

exit

Hope this helps