Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

DNS Delegation Issue

Posted on 2014-11-20
9
Medium Priority
?
126 Views
Last Modified: 2014-11-24
I am trying to add servers and it resolves successfully but when i click "apply" it throws this error.  

"Failure to write DNS record <server1.> refused"

Thanks
0
Comment
Question by:Sean Kelsey
9 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40455930
Please explain EXACTLY what it is you are trying to do? What gives the error when you try to do what?
0
 

Author Comment

by:Sean Kelsey
ID: 40456130
I am trying to add 2 DC's to DNS delegation but it fails and throws the following error. "Failure to write DNS record <server1.> refused"

Also when I run repadmin /kcc * it says access denied to every DC in the forest. When I run repadmin /syncall etc. replication goes through fine.
0
 

Author Comment

by:Sean Kelsey
ID: 40456135
I also ran DCDAIG /TEST:CheckSecurityError and it comes out successful.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456143
Can you post the actual output from the repadmin /kcc please
0
 

Author Comment

by:Sean Kelsey
ID: 40456149
In review I found out that it wasnt completely successful. Failed here:
 
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
    Replicating Directory Changes In Filtered Set
0
 
LVL 10

Expert Comment

by:Walter Padrón
ID: 40456154
Don't fully understand your question but

DC's records doesn't need to be added manually to DNS.
The Netlogon service should register the records, restart the service and wait for 15 min
You can also register records typing     C:\> ipconfig /registerdns

Best regards
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456155
Do you intend to have RODC in the domain? That error is not unusual if you have NOT prepped your domain for RODC but if you dont need them then you can ignore that one.
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40456159
You still have not answer "What EXACTLY" is it your trying to do?
Is it as simple as wpadron thinks? Your just adding two dc's to a domain and not seing the DNS records yet?
0
 
LVL 20

Accepted Solution

by:
compdigit44 earned 2000 total points
ID: 40460880
I "assume" you have an existing Zone which you are adding additional DNS servers to, in order to service the zone. Is the Zone AD integrated?  If so check to see if the DNSadmins groups has the proper permissions on the zone...

http://support.microsoft.com/kb/837335
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question