Slow domain resolution on Server 2008r2

We recently installed a server running Server 2008r2, with DNS and AD for about 10 users (on a fast machine). Since that installation, all users get "Resolving Host..." when they try to get to any website, then a couple of seconds of delay, then the website loads.

I'd like to get the delay out of the process, but this isn't my area of expertise, so any troubleshooting or suggestions would be appreciated.
LVL 38
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jaroslav LatalMSPCommented:
Hello lherrou,

It seems like a DNS problem. How the DNS is confugured? Server's NIC is configured to, you added DNS role and configured DNS forwarder?

You can also run dnsdiag if there are some errors.

Thomas GrassiSystems AdministratorCommented:
Have you ever run this

dcdiag >dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDN HERE>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt

Lets see if DNS is working
How long do nslookup queries take to come back?

From a client machine:

-Start > Run > CMD
-type "nslookup"

How long does it take for that to bring results back?  Is the IP address or server name of the server it looked at the new server you're troubleshooting?
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

lherrouAuthor Commented:
Directory Server Diagnosis

Performing initial setup:

   Trying to find home server...

   Home Server = <SERVERNAME>

   * Identified AD Forest. 
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\<SERVERNAME>

      Starting test: Connectivity

         The host

         76a85aa4-f4ab-4033-828f-bcb4ff8ec654._msdcs.<DOMAIN>.local could

         not be resolved to an IP address. Check the DNS server, DHCP, server

         name, etc.

         Got error while checking LDAP and RPC connectivity. Please check your

         firewall settings.

         ......................... <SERVERNAME> failed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\<SERVERNAME>

      Skipping all tests, because server <SERVERNAME> is not responding to

      directory service requests.

Open in new window

(I changed actual server name to <SERVERNAME> and actual domain to <DOMAIN> to preserve anonymity)
lherrouAuthor Commented:
>> How long do nslookup queries take to come back?

DNS request timed out
     timeout was 2 seconds
Server: unknown
Jaroslav LatalMSPCommented:
Did you read my post?
lherrouAuthor Commented:

Thank you. Yes, on both DNS role and Forwarders, but when I went to take a look, I found that the first forwarder had a typo in the IP address. I corrected that, and now resolving is almost instantaneous.

Thank you for putting me on the right track, and for asking me to look at your post again (I had, but I knew I DNS role and forwarders were set up, so I responded to the other posts first).

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas GrassiSystems AdministratorCommented:
didn't the dcdiag help you out determining the problem I see in the results that it said to check your dns
Thomas GrassiSystems AdministratorCommented:
Also I wrote a script that backs up DNS and emails me the report on a weekly basis.
If you are interested let me know
lherrouAuthor Commented:
trgrassijr55, thank you. You are right that your dcdiag confirmed that it said to check DNS, which also was a pointer to the problem.

Also, I am interested in your script... would you be willing to write an article for EE and present it that way? It'll get you some points and get it seen by a much broader audience. And as one of EE's article editors, I'd be happy to work with you to get it published.
Thomas GrassiSystems AdministratorCommented:
Here is the script you just need to modify your names and drives
I schedule this weekly
Also use a program febooti which is a batch command line smtp email program works great

@echo off

for /f "tokens=2-4 delims=/ " %%a in ('date /t') do (set mydate=%%c-%%a-%%b)
for /f "tokens=1-2 delims=/: " %%a in ("%TIME%") do (set mytime=%%a-%%b)

md e:\dns\%mydate%_%mytime%

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsontc.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomnet.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnssharepoint.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydom.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomtest.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmsdcs.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsrlz.txt

dnscmd /ZoneExport dnsontc.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydomnet.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnssharepoint.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydom.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydomtest.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmsdcs.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsrlz.%mydate%_%mytime%.dns

cd \windows\system32\dns

move *.%mydate%_%mytime%.dns e:\dns\%mydate%_%mytime%\

C:\util\febooti\febootimail -from -to -msg "DNS Network Status" -subj "DNS Backup" -dontupdate -attach E:\dns\%mydate%_%mytime%\*.txt -smtp


Hope this helps
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.