Intermittent internal DNS resolution issues (AD intergrated DNS)

Hi All

Our DNS servers are all Win 2008R2 domain controllers, we have our main internal Zone mydomain.local plus an additional couple of forward lookup zones that are also AD integrated,

I am seeing an issue were some workstations  are not able to resolve DNS records that are in these zones, yet the machine next to them can (all PC's are Win 7), also sometimes these same machines that are not working do in fact work, its intermittent,

I was notified that a web page was not working for a couple of users, when I tried to ping it from their machines I was getting host not found, however on the machines that were working it resolved, doing an IP config showed that they use the same primary DNS server.

if I do an nslookup on the machines that are working I get 2 timeouts before it resolves the name, not sure if that's relevant as it still works, all PC's are Gigabit connected and are on the same physical site as their primary DNS server.

Not really sure how to start troubleshooting this one, had a look on the DNS event log but nothing in there

Anyone got any idea's

Thanks
LVL 5
ncomperAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sushil SonawaneCommented:
Make sure on your desktop / system NIC card dns server setting pointing to your dns server.

Make sure your windows firewall or network firewall not blocking your dns request port no or access software/website port no.

If still issue persists then add host entry in local system host file it is store in  (root drive\windows\system32\drivers\etc\host)
0
ncomperAuthor Commented:
Hi

Yes all PC's point to our DC's for DNS.

We disable the firewall on all internal machines domain profile.

We did test adding an entry in the hosts file and it fixed it, as soon as we removed the issue come back, however I don't like using hosts file as its hard to manage and doesn't scale, I would prefer to to get to the root cause of the issue

Thanks
0
rebelscumCommented:
Have you done an ipconfig /flushdns on the machines? Are you purging stale DNS records?
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Pramod UbheCommented:
also check for network latency between clients and DNS servers, it should not be more than 300msec.
Also you might want to check network settings of your clients like dns suffix, WINS settings, connection specific dns suffix. Also make sure to try fqdn.
0
SandeshdubeySenior Server EngineerCommented:
If issue with NSLOOKUP only then it seems that your firewall does not support EDNS0 traffic, please try to disable this feature.To disable it, you can run this command: dnscmd /config /EnableEDNSProbes 0
 
EDNS0 (Extension mechanisms for DNS)
http://msmvps.com/blogs/acefekay/archive/2010/10/11/edns0-extension-mechanisms-for-dns.aspx
 
DNS Forwarders Problems in Windows 2008 R2 DNS Services
http://blogs.technet.com/b/hishamb_msft/archive/2010/09/02/dns-forwarders-problems-in-windows-2008-r2-dns-services.aspx
 
Also ensure the correct dns setting on DC as below.
http://abhijitw.wordpress.com/2012/03/03/best-practices-for-dns-client-settings-on-domain-controller/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ncomperAuthor Commented:
Latency on our network is sub 1 ms so don't think its that.

Thanks, ill check those articles out
0
ncomperAuthor Commented:
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DNS

From novice to tech pro — start learning today.