[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 288
  • Last Modified:

SBS 2011 DNS Issues affecting browsing and Exchange 0_o

I have a few SBS 2011 boxes that I manage and 1 in particular is giving me trouble.  It's a single server environment with a mix of laptop and desktop clients, all running Windows7.  Here's what I've been able to ascertain:  If I assign just the SBS2011 server's IP as the only IP address in DHCP, then client computers have massive problems with DNS resolution of websites.  Websites load slowly, or sometimes fail to load at all.  If I assign something like the router IP, ISP DNS, or google public DNS as a secondary DNS server then web browsing works fine....but Outlook Out of Office doesn't work!  We are using the Exchange server on the SBS box.  Clients that VPN in (PPTP to SBS2011) can use Out of Office fine.  It also works fine in OWA (either in, or outside of the office).  I'm a little stumped, any ideas?
0
CRush1682
Asked:
CRush1682
  • 5
  • 3
  • 2
1 Solution
 
Michael MachieFull-time technical multi-taskerCommented:
Your DNS server should only have it's own IP in the DNS settings of its own NIC. Any other IPs will cause issues.

Also, when you add the public DNS or ISP DNS info everything browses the net fine . What you may need to do is add Google's, or another provider's, public DNS server into your Forwarders on your DNS server.
(see pic).

DNS Manager - (Dbl-click) Forwarders - Edit - add public DNS IP.

This may help and if it does you are good to go.
Capture.PNG
0
 
Simon Butler (Sembee)ConsultantCommented:
There are some issues with Windows 2008 R2 DNS and certain domains.
Run the SBS 2011 BPA (links here: http://sbsbpa.com/ ) and correct what it flags up.

Simon.
0
 
CRush1682Author Commented:
On the SBS NIC I only have the servers IP address listed under DNS Servers.  I have already added Google public DNS A and B as well as my ISP DNS1 and DNS2 IP addresses to the forwarders list in the DNS Server service.  Running the BPA does yield something relevant:

No DNS name server records
Category: Configuration
Source: 74
Issue: There are no DNS name server (NS) resource records for the delegated _msdcs forward lookup zone.

However, when I check the properties of the _msdcs folder under my domain lookup zone, the server name and it's IP address do show up with a green check mark.

Any ideas?
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
Simon Butler (Sembee)ConsultantCommented:
I was hoping it would send you to this article:
http://support.microsoft.com/kb/968372

That error you have posted can often be a false negative - it should have pointed you to an article on TechNet to resolve.

Simon.
0
 
CRush1682Author Commented:
That registry value is already in place.  Of note, browsing from the server also yields the same DNS resolution issues.
0
 
Simon Butler (Sembee)ConsultantCommented:
I don't really have anything else to suggest.
The only times I have seen this problem it has been external influences that were the cause - firewalls for example.

Simon.
0
 
CRush1682Author Commented:
I'll look at my perimeter firewall next although I haven't had this issue in other locations.
0
 
Michael MachieFull-time technical multi-taskerCommented:
Have you tried adding the DNS record stated in my comment (first posted response)?
0
 
CRush1682Author Commented:
Yes, I believe in the end it was an issue with our Netgear FVS318N firmware.  I updated to the latest version and the issues seem to have disappeared.  I updated the firmware early last week, set DHCP to assign only the SBS server IP as DNS and I have heard no complaints.  The strange thing is I have that exact same router at several other locations with no issues.  *shrug*
0
 
CRush1682Author Commented:
He was right!  Kind of a stab in the dark but he was right.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 5
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now