SBS 2011 DNS Issues affecting browsing and Exchange 0_o

I have a few SBS 2011 boxes that I manage and 1 in particular is giving me trouble.  It's a single server environment with a mix of laptop and desktop clients, all running Windows7.  Here's what I've been able to ascertain:  If I assign just the SBS2011 server's IP as the only IP address in DHCP, then client computers have massive problems with DNS resolution of websites.  Websites load slowly, or sometimes fail to load at all.  If I assign something like the router IP, ISP DNS, or google public DNS as a secondary DNS server then web browsing works fine....but Outlook Out of Office doesn't work!  We are using the Exchange server on the SBS box.  Clients that VPN in (PPTP to SBS2011) can use Out of Office fine.  It also works fine in OWA (either in, or outside of the office).  I'm a little stumped, any ideas?
CRush1682Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Michael MachieFull-time technical multi-taskerCommented:
Your DNS server should only have it's own IP in the DNS settings of its own NIC. Any other IPs will cause issues.

Also, when you add the public DNS or ISP DNS info everything browses the net fine . What you may need to do is add Google's, or another provider's, public DNS server into your Forwarders on your DNS server.
(see pic).

DNS Manager - (Dbl-click) Forwarders - Edit - add public DNS IP.

This may help and if it does you are good to go.
Capture.PNG
0
Simon Butler (Sembee)ConsultantCommented:
There are some issues with Windows 2008 R2 DNS and certain domains.
Run the SBS 2011 BPA (links here: http://sbsbpa.com/ ) and correct what it flags up.

Simon.
0
CRush1682Author Commented:
On the SBS NIC I only have the servers IP address listed under DNS Servers.  I have already added Google public DNS A and B as well as my ISP DNS1 and DNS2 IP addresses to the forwarders list in the DNS Server service.  Running the BPA does yield something relevant:

No DNS name server records
Category: Configuration
Source: 74
Issue: There are no DNS name server (NS) resource records for the delegated _msdcs forward lookup zone.

However, when I check the properties of the _msdcs folder under my domain lookup zone, the server name and it's IP address do show up with a green check mark.

Any ideas?
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

Simon Butler (Sembee)ConsultantCommented:
I was hoping it would send you to this article:
http://support.microsoft.com/kb/968372

That error you have posted can often be a false negative - it should have pointed you to an article on TechNet to resolve.

Simon.
0
CRush1682Author Commented:
That registry value is already in place.  Of note, browsing from the server also yields the same DNS resolution issues.
0
Simon Butler (Sembee)ConsultantCommented:
I don't really have anything else to suggest.
The only times I have seen this problem it has been external influences that were the cause - firewalls for example.

Simon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CRush1682Author Commented:
I'll look at my perimeter firewall next although I haven't had this issue in other locations.
0
Michael MachieFull-time technical multi-taskerCommented:
Have you tried adding the DNS record stated in my comment (first posted response)?
0
CRush1682Author Commented:
Yes, I believe in the end it was an issue with our Netgear FVS318N firmware.  I updated to the latest version and the issues seem to have disappeared.  I updated the firmware early last week, set DHCP to assign only the SBS server IP as DNS and I have heard no complaints.  The strange thing is I have that exact same router at several other locations with no issues.  *shrug*
0
CRush1682Author Commented:
He was right!  Kind of a stab in the dark but he was right.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.