Solved

Problems with DNS and DC at another location

Posted on 2014-01-13
3
229 Views
Last Modified: 2014-01-29
Hi,

I have some trouble with our DNS-servers and DC's.

We have two locations (A and B). Location A contains 3 DC/DNS servers and this is the primary location. Location B has 1 RODC/DNS and is our secondary site. These two locations are connected through a VPN tunnel.

When users from location A travels to location B and start up their laptop, they can't connect to any servers at location A and when I run the command "echo %logonserver%" I can see that they connect to a DC at location A.

I can ping all the servers at location A from the laptop at location B by IP, but not with the FQDN.

When I run a NSLOOKUP at location B against a server at location A, it gives me the FQDN and IP for the server. The DNS-servername is unknown though, but it gives me the IP of the DNS server at location B.

What is wrong?? :)
0
Comment
Question by:Sum Wum
3 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 39776162
have you got any reverse zones setup for that IP range that will sort out the server name part

how it the DNS server in site B setup?

is it just part of the DNS zone.
check the recursive test on it to make sure that it can resolve name.

you can then enable debugging on there to to start seeing any error on the DNS lookups
0
 
LVL 18

Expert Comment

by:Jeremy Weisinger
ID: 39778451
Have you run any nslookup queries against your RODC? If it's an AD-integrated zone, run repadmin /showrepl and verify the zone has been replicated successfully.
0
 
LVL 26

Accepted Solution

by:
DrDave242 earned 500 total points
ID: 39779934
You may have more than one issue going on here.

...when I run the command "echo %logonserver%" I can see that they connect to a DC at location A.
Does this only affect traveling users whose "home base" is location A, or does it also affect users who are permanently at location B (if there are such users)? If everyone is affected, make sure your IP subnets are correctly associated with the corresponding site objects in AD Sites and Services. If only traveling users are affected, have you configured the Password Replication Policy to allow those users' credentials and the credentials of their laptops to be cached on the RODC? If not, they'll always use a writable DC for authentication.

Are you sure that nslookup resolves FQDNs correctly but ping does not when using the same DNS server? If so, that's certainly odd. Those two methods use different resolvers, but generally if one works, the other does too.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now