Link to home
Start Free TrialLog in
Avatar of CRush1682
CRush1682

asked on

SBS 2011 DNS Issues affecting browsing and Exchange 0_o

I have a few SBS 2011 boxes that I manage and 1 in particular is giving me trouble.  It's a single server environment with a mix of laptop and desktop clients, all running Windows7.  Here's what I've been able to ascertain:  If I assign just the SBS2011 server's IP as the only IP address in DHCP, then client computers have massive problems with DNS resolution of websites.  Websites load slowly, or sometimes fail to load at all.  If I assign something like the router IP, ISP DNS, or google public DNS as a secondary DNS server then web browsing works fine....but Outlook Out of Office doesn't work!  We are using the Exchange server on the SBS box.  Clients that VPN in (PPTP to SBS2011) can use Out of Office fine.  It also works fine in OWA (either in, or outside of the office).  I'm a little stumped, any ideas?
Avatar of Michael Machie
Michael Machie
Flag of United States of America image

Your DNS server should only have it's own IP in the DNS settings of its own NIC. Any other IPs will cause issues.

Also, when you add the public DNS or ISP DNS info everything browses the net fine . What you may need to do is add Google's, or another provider's, public DNS server into your Forwarders on your DNS server.
(see pic).

DNS Manager - (Dbl-click) Forwarders - Edit - add public DNS IP.

This may help and if it does you are good to go.
Capture.PNG
There are some issues with Windows 2008 R2 DNS and certain domains.
Run the SBS 2011 BPA (links here: http://sbsbpa.com/ ) and correct what it flags up.

Simon.
Avatar of CRush1682
CRush1682

ASKER

On the SBS NIC I only have the servers IP address listed under DNS Servers.  I have already added Google public DNS A and B as well as my ISP DNS1 and DNS2 IP addresses to the forwarders list in the DNS Server service.  Running the BPA does yield something relevant:

No DNS name server records
Category: Configuration
Source: 74
Issue: There are no DNS name server (NS) resource records for the delegated _msdcs forward lookup zone.

However, when I check the properties of the _msdcs folder under my domain lookup zone, the server name and it's IP address do show up with a green check mark.

Any ideas?
I was hoping it would send you to this article:
http://support.microsoft.com/kb/968372

That error you have posted can often be a false negative - it should have pointed you to an article on TechNet to resolve.

Simon.
That registry value is already in place.  Of note, browsing from the server also yields the same DNS resolution issues.
ASKER CERTIFIED SOLUTION
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I'll look at my perimeter firewall next although I haven't had this issue in other locations.
Have you tried adding the DNS record stated in my comment (first posted response)?
Yes, I believe in the end it was an issue with our Netgear FVS318N firmware.  I updated to the latest version and the issues seem to have disappeared.  I updated the firmware early last week, set DHCP to assign only the SBS server IP as DNS and I have heard no complaints.  The strange thing is I have that exact same router at several other locations with no issues.  *shrug*
He was right!  Kind of a stab in the dark but he was right.