Windows 2003 DNS; non-existent DC set as delgation under forward zone
I was doing some dcdiag /test:dns commands and found the delegation test was failing. After looking at the results I found a delegation to a dc that no longer exists. I’m in the process of going to a 2008 functional level and would like to get the bugs worked out before converting.
---Snippet of dcdiag results-------------------
TEST: Delegations (Del)
Delegation information for the zone: mydomain.org.
Delegated domain name: _msdcs.mydomain.org.
Warning: DNS server: old-dc.mydomain.org. IP: <Unavailable> Failure:Missing glue A record
[Error details: 9714 (Type: Win32 - Description: DNS name does not exist.)]
--------------------------
Current Setup:
3 - DC's ( 2 - Windows 2003, 1 -Windows 2008 R2)
All FSMO roles are shared between the 2003 DC's
2003 Functional level.
DNS running on all DC's. Active Directory Integrated
Ill attach a screenshot of the DNS zones.
My question is can I delete this delegation or edit the entry and put the current dc in its place. Everything else appears correct under the _msdcs zone and the mydomain.org zone with the exception of this entry. I’ve checked ADUC under domain controllers and no such entry existed for old-dc also nothing exists under sites and services with the old-dc server name. The remaining dcdiag dns tests Passed with the exception of the 2008 server but that’s another question for another post.
Thanks in advance for the help.
dns.JPG
---Snippet of dcdiag results-------------------
TEST: Delegations (Del)
Delegation information for the zone: mydomain.org.
Delegated domain name: _msdcs.mydomain.org.
Warning: DNS server: old-dc.mydomain.org. IP: <Unavailable> Failure:Missing glue A record
[Error details: 9714 (Type: Win32 - Description: DNS name does not exist.)]
--------------------------
Current Setup:
3 - DC's ( 2 - Windows 2003, 1 -Windows 2008 R2)
All FSMO roles are shared between the 2003 DC's
2003 Functional level.
DNS running on all DC's. Active Directory Integrated
Ill attach a screenshot of the DNS zones.
My question is can I delete this delegation or edit the entry and put the current dc in its place. Everything else appears correct under the _msdcs zone and the mydomain.org zone with the exception of this entry. I’ve checked ADUC under domain controllers and no such entry existed for old-dc also nothing exists under sites and services with the old-dc server name. The remaining dcdiag dns tests Passed with the exception of the 2008 server but that’s another question for another post.
Thanks in advance for the help.
dns.JPG
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the info.
I added all of the DNS servers to the zone and deleted the former entry and everything is testing fine
I added all of the DNS servers to the zone and deleted the former entry and everything is testing fine
ASKER
1. Should I add delegations to all of the DNS servers or just the authoritative server?
2. Once the above question is completed should I enter the information manually on one server and let it replicate or should I enter the info manually on all DC's.