Slow domain resolution on Server 2008r2

We recently installed a server running Server 2008r2, with DNS and AD for about 10 users (on a fast machine). Since that installation, all users get "Resolving Host..." when they try to get to any website, then a couple of seconds of delay, then the website loads.

I'd like to get the delay out of the process, but this isn't my area of expertise, so any troubleshooting or suggestions would be appreciated.
LVL 38
Who is Participating?
lherrouConnect With a Mentor Author Commented:

Thank you. Yes, on both DNS role and Forwarders, but when I went to take a look, I found that the first forwarder had a typo in the IP address. I corrected that, and now resolving is almost instantaneous.

Thank you for putting me on the right track, and for asking me to look at your post again (I had, but I knew I DNS role and forwarders were set up, so I responded to the other posts first).
Jaroslav LatalConnect With a Mentor MSPCommented:
Hello lherrou,

It seems like a DNS problem. How the DNS is confugured? Server's NIC is configured to, you added DNS role and configured DNS forwarder?

You can also run dnsdiag if there are some errors.

Thomas GrassiSystems AdministratorCommented:
Have you ever run this

dcdiag >dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDN HERE>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt

Lets see if DNS is working
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

How long do nslookup queries take to come back?

From a client machine:

-Start > Run > CMD
-type "nslookup"

How long does it take for that to bring results back?  Is the IP address or server name of the server it looked at the new server you're troubleshooting?
lherrouAuthor Commented:
Directory Server Diagnosis

Performing initial setup:

   Trying to find home server...

   Home Server = <SERVERNAME>

   * Identified AD Forest. 
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\<SERVERNAME>

      Starting test: Connectivity

         The host

         76a85aa4-f4ab-4033-828f-bcb4ff8ec654._msdcs.<DOMAIN>.local could

         not be resolved to an IP address. Check the DNS server, DHCP, server

         name, etc.

         Got error while checking LDAP and RPC connectivity. Please check your

         firewall settings.

         ......................... <SERVERNAME> failed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\<SERVERNAME>

      Skipping all tests, because server <SERVERNAME> is not responding to

      directory service requests.

Open in new window

(I changed actual server name to <SERVERNAME> and actual domain to <DOMAIN> to preserve anonymity)
lherrouAuthor Commented:
>> How long do nslookup queries take to come back?

DNS request timed out
     timeout was 2 seconds
Server: unknown
Jaroslav LatalMSPCommented:
Did you read my post?
Thomas GrassiSystems AdministratorCommented:
didn't the dcdiag help you out determining the problem I see in the results that it said to check your dns
Thomas GrassiSystems AdministratorCommented:
Also I wrote a script that backs up DNS and emails me the report on a weekly basis.
If you are interested let me know
lherrouAuthor Commented:
trgrassijr55, thank you. You are right that your dcdiag confirmed that it said to check DNS, which also was a pointer to the problem.

Also, I am interested in your script... would you be willing to write an article for EE and present it that way? It'll get you some points and get it seen by a much broader audience. And as one of EE's article editors, I'd be happy to work with you to get it published.
Thomas GrassiSystems AdministratorCommented:
Here is the script you just need to modify your names and drives
I schedule this weekly
Also use a program febooti which is a batch command line smtp email program works great

@echo off

for /f "tokens=2-4 delims=/ " %%a in ('date /t') do (set mydate=%%c-%%a-%%b)
for /f "tokens=1-2 delims=/: " %%a in ("%TIME%") do (set mytime=%%a-%%b)

md e:\dns\%mydate%_%mytime%

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsontc.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomnet.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnssharepoint.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydom.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmydomtest.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsmsdcs.txt

dnscmd /enumrecords @ /type A /detail > e:\dns\%mydate%_%mytime%\dnsrlz.txt

dnscmd /ZoneExport dnsontc.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydomnet.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnssharepoint.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydom.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmydomtest.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsmsdcs.%mydate%_%mytime%.dns

dnscmd /ZoneExport dnsrlz.%mydate%_%mytime%.dns

cd \windows\system32\dns

move *.%mydate%_%mytime%.dns e:\dns\%mydate%_%mytime%\

C:\util\febooti\febootimail -from -to -msg "DNS Network Status" -subj "DNS Backup" -dontupdate -attach E:\dns\%mydate%_%mytime%\*.txt -smtp


Hope this helps
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.