DNS issues, GPO errors

Good day

I have the following scenario:

I had a unknown name service record in my company DNS Forward lookup zone under the _msdcs (greyed out) folder. The record was in a unknown computer name format. I have attached the DCdiag results while the the rouge entry was present. During this time computers started giving problems with logging on. PC's where taking too long to present the user with the logon screen. I have attached log files with error codes recorded on the PC's in the event logs.

After i removed the entry, PC's seemed to be fine but this was only temporary as more users started to complain. I did some more research and discovered i was not supposed to delete the rouge entry but rather point it to the correct GC on our LAN. I did this and tested again, this seems to have solved the issue. I am still however getting calls from users who are complaining about slow PC's at logon and these PCs are complaining about DNS and GPOs in their event logs.

I have substituted the actual server name in the files as follows:

Actual DC name = Servername
Actual Domain name = Domainname
DCDiagFailed.txt
DCdiagPass.txt
Eventlogerrors.txt
LVL 3
Helao MwapangashaData Centre: Server EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

tolinromeCommented:
Running this command on your DC would give more insight - dcdiag /e /v >>c:\dcdiag.txt - you can post the commands here if you like.

I'm not sure how your network is configured with DNS and AD, but you should have in AD sites and services your location(s) and its IP subnet range and all its physical DC's in that site.

All DC's should point to themselves and\or another domain controller IP address on their network card properties ipv4 ip address.
In DNS on the properties of your domain under the forward lookup zone on each tab make sure you have the right settings. Name server should list all the DC's and allow zone transfers.

Clients should have in their network card properties for ipv4 th eip addresses listed for the domain controllers for DNS. This is most likely given out with dhcp scope settings.

The more you tell us about your environment we can help.
0
MaheshArchitectCommented:
Do you have _msdcs.domain.com AD integrated zone present on domain controllers ?

If you have above zone in place (Its replicated to all DCs in forest), then you should have _msdcs greyed folder (its actually not greyed out, it is delegation to _msdcs.domain.com zone) and on every domain controller, it should point to NS record of that domain controller only)

However if you have deleted _msdcs.domain.com zone, you can simply delete that _msdcs delegation (greyed out folder) from domain.com and restart netlogon service on any one DC
What it will do, it will delete _msdcs delegation from all DCs as part of AD replication and create _msdcs folder under domain.com and it will get replicated to all domain controllers and you will be just fine.

U need to ensure that whatever changes you make on one DC should get replicated to all DCs in domain.
Check below thread for more details
http://www.experts-exchange.com/Software/Server_Software/Active_Directory/Q_28415910.html
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.