Solved

Unable to manually add a host record in Windows 2008 R2 DNS after DC Promo

Posted on 2014-07-17
7
1,435 Views
Last Modified: 2014-07-23
Hi All,

      I have recently introduced a new Windows 2008 R2 DC in our Windows 2003 Domain Environment. I have a strange issue on adding a host A record on the new W2K8 R2 DC's DNS. Everytime I try to add a record, I would get the following error prompt:

The host record xxxx.mydomain.local cannot be created. Refused

If I look at the DNS event log on the W2K8 DC, it would show the following error event:

Event ID 4015 Source: DNS-Server-Service

The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "0000051B: AtrErr: DSID-030F1F8D, #1:
      0: 0000051B: DSID-030F1F8D, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 20119 (nTSecurityDescriptor)". The event data contains the error.

---------------------------------------------------------------------------------------------------------------------------------------------------------


I can manually add the host record without any issue on the W2K3 DC, and it would replicated correctly to the W2K8 DC. Any idea how can I fix this issue?

Thank you.
0
Comment
Question by:livets
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40203168
I'd say run a dcdiag on both machines and compare the results.  Also a replmon (2008) and repadmin /showrepl (2003).  Verify there's no errors anywhere.

Also what's your functional level?
0
 

Author Comment

by:livets
ID: 40203183
Hi Ben,

       Dcdiag on both W2K3 and W2K8 R2 dc pass without any error, repadmin /showrepl show success replication on both DC as well. My forest and domain functional level are Windows 2003.
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40203196
Hmm.. did you move any FSMO roles to the 2008?  Did you run  adprep /forestprep and adprep /domainprep as well?
0
Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

 

Author Comment

by:livets
ID: 40204214
I have move all FSMO to the W2K8 R2 DC, yes adprep has been ran.
0
 

Accepted Solution

by:
livets earned 0 total points
ID: 40204597
The issue has been resolved after restarting active directory domain service.
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 40204609
heh. I was going to ask you if you;d rebooted lately, but figured that'd have been a stupid question lol.
0
 

Author Closing Comment

by:livets
ID: 40213729
The solution was tested after restarting AD DS service, and it indeed fix the problem.
0

Featured Post

Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now