Solved

Modifying Weight and Priority Creating Duplicate Records

Posted on 2015-01-09
5
244 Views
Last Modified: 2015-10-02
Good Afternoon,

Problem with DNS this time:

The setup:
2008R2 OS's
5 domain controllers -
SITE A:
DC1
DC2
DC3
DC4

SITE B:
DC5

I have stopped inbound and outbound replication on all servers except DC1 using the following commands:

repadmin /options <DC NAME> +DISABLE_OUTBOUND_REPL
repadmin /options <DC NAME> +DISABLE_INBOUND_REPL

On DC1 the inbound replication was also stopped using :  repadmin /options DC1 +DISABLE_INBOUND_REPL so that the server can only send OUTBOUND to the other servers.

For the preferred servers, I'm using the Priority =0 and Weight = 100.
For the other secondary servers, I'm using  Priority =200 and Weight = 100.

I have modified all the SRV records under the _msdcs.DOMAIN.COM and DOMAIN.COM (kerberos, ldap,kpasswd and others) by changing the Weight and Priority so users will use specific domain controllers for authentication requests.

The problem is that after a few minutes, duplicate SRV records are created using the standard Weight and Priority.  So I have two SRV records of the same server, just with different Weight and Priority.  (This is causing a problem since the new entries are taking over my customized entries and workstations authenticate with undesired DCs')

I had to re-enable all the inbound and outbound connection once again whilst still facing the same problem.

So the main question stand here: How am I going to stop the creation of automatic DNS entries ?

Will appreciate some comments from who ever experienced such issue
0
Comment
Question by:ml- user
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 20

Expert Comment

by:compdigit44
ID: 40542086
On your other DC's besides DC1 have you tried to se the GP "DC Locator DNS Records Not Registered by the DCs."  to prevent them from registering their SRV records and overwriting you custom settings?
0
 
LVL 40

Accepted Solution

by:
footech earned 250 total points
ID: 40551689
The way to adjust these values (weight and priority) is to modify the registry on those DCs.
This link is very comprehensive in its coverage.
http://blogs.msmvps.com/acefekay/2010/01/03/the-dc-locator-process-the-logon-process-controlling-which-dc-responds-in-an-ad-site-and-srv-records/

For the specific registry settings, I recommend you visit.
http://technet.microsoft.com/en-us/library/cc787370(WS.10).aspx
There are two subtopics that give you the details for modifying the weight and priority of the SRV records.
0
 
LVL 20

Assisted Solution

by:compdigit44
compdigit44 earned 250 total points
ID: 40552452
ml- user, after reading the links that footech posted it details exactly what you are looking for..

Nice post footech..
0
 

Author Comment

by:ml- user
ID: 40552916
Thank you for your comments, seems to be the solution since the default entries are appearing again because they are rubberstamped in the registry. Will let you know if the problem is solved.
0
 

Author Comment

by:ml- user
ID: 41021475
Problem Solved :)
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question