DNS Server Interface resets listening addresses


We are experiencing a situation with a client whereby a DNS Servers list of Interfaces keeps resetting to listen on all IP addresses.

There are two DNS servers in the domain, both of which are domain controllers. Both servers have two network cards with different IP address ranges on each. The purpose of this is one for production and one for DR,

To prevent DNS issues on the network, the DNS servers are set to only listen for DNS requests on the IPv4 address of the production network. However, every now and then (usually following a reboot or DNS service restart) a 410 DNS event is logged and the DNS configuration changes to listen to requests on all interfaces. This results in clients trying to resolve IP addresses on the DR network.

The box to register this adapter in DNS has been un checked on both NICs.

Any guidance greatly received.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Raj-GTSystems EngineerCommented:
Even if you uncheck the register adapters options, the Netlogon service will still register itself in DNS every time you reboot. I don't think multihoming an AD+DNS server is supported. There is no easy way to fix this I'm afraid.
Will SzymkowskiSenior Solution ArchitectCommented:
We have the same setup and this have never happen to us. The only thing I can think of is maybe there is something wrong with the actual DNS role on the server or possible getting the latest windows patches as this is not normal behavior.

Does this happen on both DNS  servers? Few thing I would do below...
• install latest windows patches
• check the NIC binding order in advance options, make sure DR Nic is lowest priority
• Update the NIC drivers for the DR NIC


Miguel Angel Perez MuñozCommented:
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Manjunath SulladTechnical ConsultantCommented:
utilizeAuthor Commented:

Thank you for your comments. I can confirm that I have followed the procedures mentioned above prior to posting here.

To confirm:

All MS updates are installed with latest NIC drivers.
The binding order specifies the production LAN first
I have selected to only listen on the a specific address, as per the technet article.

Thank you,
Life1430Sr EngineerCommented:
reinstall DNS Role
utilizeAuthor Commented:

have finally got around to reinstalling the DNS role on both DCs but still the problem happens.

I did this:

uninstalled DNS role
confirmed role uninstalled
reinstalled role

IP interfaces shows all IP addresses again.

Any further ideas please?
utilizeAuthor Commented:
Setting the DNS Server Service to Delayed Start resolved the issue.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
utilizeAuthor Commented:
Setting the DNS Server Service fixed the issue. Resolved with Microsoft Tech Support.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.