?
Solved

Unable to manually add a host record in Windows 2008 R2 DNS after DC Promo

Posted on 2014-07-17
7
Medium Priority
?
1,867 Views
Last Modified: 2014-07-23
Hi All,

      I have recently introduced a new Windows 2008 R2 DC in our Windows 2003 Domain Environment. I have a strange issue on adding a host A record on the new W2K8 R2 DC's DNS. Everytime I try to add a record, I would get the following error prompt:

The host record xxxx.mydomain.local cannot be created. Refused

If I look at the DNS event log on the W2K8 DC, it would show the following error event:

Event ID 4015 Source: DNS-Server-Service

The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "0000051B: AtrErr: DSID-030F1F8D, #1:
      0: 0000051B: DSID-030F1F8D, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 20119 (nTSecurityDescriptor)". The event data contains the error.

---------------------------------------------------------------------------------------------------------------------------------------------------------


I can manually add the host record without any issue on the W2K3 DC, and it would replicated correctly to the W2K8 DC. Any idea how can I fix this issue?

Thank you.
0
Comment
Question by:livets
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40203168
I'd say run a dcdiag on both machines and compare the results.  Also a replmon (2008) and repadmin /showrepl (2003).  Verify there's no errors anywhere.

Also what's your functional level?
0
 

Author Comment

by:livets
ID: 40203183
Hi Ben,

       Dcdiag on both W2K3 and W2K8 R2 dc pass without any error, repadmin /showrepl show success replication on both DC as well. My forest and domain functional level are Windows 2003.
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40203196
Hmm.. did you move any FSMO roles to the 2008?  Did you run  adprep /forestprep and adprep /domainprep as well?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 

Author Comment

by:livets
ID: 40204214
I have move all FSMO to the W2K8 R2 DC, yes adprep has been ran.
0
 

Accepted Solution

by:
livets earned 0 total points
ID: 40204597
The issue has been resolved after restarting active directory domain service.
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40204609
heh. I was going to ask you if you;d rebooted lately, but figured that'd have been a stupid question lol.
0
 

Author Closing Comment

by:livets
ID: 40213729
The solution was tested after restarting AD DS service, and it indeed fix the problem.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question