Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

DNS Delegation Issue

Posted on 2014-11-20
9
Medium Priority
?
122 Views
Last Modified: 2014-11-24
I am trying to add servers and it resolves successfully but when i click "apply" it throws this error.  

"Failure to write DNS record <server1.> refused"

Thanks
0
Comment
Question by:Sean Kelsey
9 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40455930
Please explain EXACTLY what it is you are trying to do? What gives the error when you try to do what?
0
 

Author Comment

by:Sean Kelsey
ID: 40456130
I am trying to add 2 DC's to DNS delegation but it fails and throws the following error. "Failure to write DNS record <server1.> refused"

Also when I run repadmin /kcc * it says access denied to every DC in the forest. When I run repadmin /syncall etc. replication goes through fine.
0
 

Author Comment

by:Sean Kelsey
ID: 40456135
I also ran DCDAIG /TEST:CheckSecurityError and it comes out successful.
0
WatchGuard Case Study: Museum of Flight

“With limited money and limited staffing, we didn’t have a lot of choices in terms of what we could do to bring efficiency. WatchGuard played a central part in changing that.” To provide strong, secure Wi-Fi access within the museum, Hunter chose to deploy WatchGuard’s AP120 APs.

 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456143
Can you post the actual output from the repadmin /kcc please
0
 

Author Comment

by:Sean Kelsey
ID: 40456149
In review I found out that it wasnt completely successful. Failed here:
 
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
0
 
LVL 10

Expert Comment

by:Walter Padrón
ID: 40456154
Don't fully understand your question but

DC's records doesn't need to be added manually to DNS.
The Netlogon service should register the records, restart the service and wait for 15 min
You can also register records typing     C:\> ipconfig /registerdns

Best regards
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456155
Do you intend to have RODC in the domain? That error is not unusual if you have NOT prepped your domain for RODC but if you dont need them then you can ignore that one.
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456159
You still have not answer "What EXACTLY" is it your trying to do?
Is it as simple as wpadron thinks? Your just adding two dc's to a domain and not seing the DNS records yet?
0
 
LVL 20

Accepted Solution

by:
compdigit44 earned 2000 total points
ID: 40460880
I "assume" you have an existing Zone which you are adding additional DNS servers to, in order to service the zone. Is the Zone AD integrated?  If so check to see if the DNSadmins groups has the proper permissions on the zone...

http://support.microsoft.com/kb/837335
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question