DNS Server Log Error (Windows Server 2016 Essentials AD)

Mahlon Otero
Mahlon Otero used Ask the Experts™
on
I'm still having issues getting my new server fully online. I created my new domain on Windows Server Essentials 2016, and migrated all the computers from the Windows Server 2012 domain onto the new domain.

Everything seems to be working except for DNS/DHCP. I have to set a static IP as well as define an outside DNS server such as 1.1.1.1 in order to get internet on my devices.

If I power back on the old server which no devices are connected to, I can connect to the internet without settings a static IP or DNS server.

I'm thinking there's a problem with the DNS on my new server, though I'm not sure what it is. The server is brand new, on a new domain as the primary DC. I migrated the DHCP settings from the old server and adjusted them to remove references to the old server, and set references to the new server.

When I run dcdiag /fix I get the following output:

Starting test: SystemLog
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kerberos._tcp.dc._msdcs.ad.domain.com. 600 IN SRV 0 100 88 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.ad.domain.com. 600 IN SRV 0 100 88 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kerberos._tcp.ad.domain.com. 600 IN SRV 0 100 88 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kerberos._tcp.Default-First-Site-Name._sites.ad.domain.com. 600 IN SRV 0 100 88 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kerberos._udp.ad.domain.com. 600 IN SRV 0 100 88 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kpasswd._tcp.ad.domain.com. 600 IN SRV 0 100 464 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168F
            Time Generated: 04/04/2019   22:05:16
            Event String:
            The dynamic deletion of the DNS record '_kpasswd._udp.ad.domain.com. 600 IN SRV 0 100 464 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         A warning event occurred.  EventID: 0x0000A000
            Time Generated: 04/04/2019   22:05:32
            Event String:
            The Security System detected an authentication error for the server LDAP/Localhost. The failure code from authentication protocol Kerberos was "An attempt was made to logon, but the netlogon service was not started.
         An error event occurred.  EventID: 0x0000168E
            Time Generated: 04/04/2019   22:05:37
            Event String:
            The dynamic registration of the DNS record 'ad.domain.com. 600 IN A 192.168.0.2' failed on the following DNS server:
         A warning event occurred.  EventID: 0x0000A000
            Time Generated: 04/04/2019   22:05:37
            Event String:
            The Security System detected an authentication error for the server DNS/ns1.ral.hostedsolutions.com. The failure code from authentication protocol Kerberos was "An attempt was made to logon, but the netlogon service was not started.
         An error event occurred.  EventID: 0x0000168E
            Time Generated: 04/04/2019   22:05:42
            Event String:
            The dynamic registration of the DNS record '_ldap._tcp.ad.domain.com. 600 IN SRV 0 100 389 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000041E
            Time Generated: 04/04/2019   22:05:44
            Event String:
            The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
         An error event occurred.  EventID: 0x0000168E
            Time Generated: 04/04/2019   22:05:46
            Event String:
            The dynamic registration of the DNS record '_ldap._tcp.Default-First-Site-Name._sites.ad.domain.com. 600 IN SRV 0 100 389 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         An error event occurred.  EventID: 0x0000168E
            Time Generated: 04/04/2019   22:05:53
            Event String:
            The dynamic registration of the DNS record '_ldap._tcp.pdc._msdcs.ad.domain.com. 600 IN SRV 0 100 389 SVR-HVDC1.ad.domain.com.' failed on the following DNS server:
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 04/04/2019   22:05:55
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ad.domain.com.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 04/04/2019   22:05:55
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'DomainDnsZones.ad.domain.com.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).  
         A warning event occurred.  EventID: 0x00001695
            Time Generated: 04/04/2019   22:05:55
            Event String:
            Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.ad.domain.com.' failed.  These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).  
         A warning event occurred.  EventID: 0x00000420
            Time Generated: 04/04/2019   22:06:08
            Event String:
            The DHCP service has detected that it is running on a DC and has no credentials configured for use with Dynamic DNS registrations initiated by the DHCP service.   This is not a recommended security configuration.  Credentials for Dynamic DNS registrations may be configured using the command line "netsh dhcp server set dnscredentials" or via the DHCP Administrative tool.
         A warning event occurred.  EventID: 0x00002724
            Time Generated: 04/04/2019   22:06:12
            Event String:
            This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.
         ......................... SVR-HVDC1 failed test SystemLog

Open in new window


How can I get DNS and DHCP working on my new server so I can finally retire the old one without having to set a static ip?

Thank you!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Mahlon OteroOwner / IT Specialist

Author

Commented:
This is the DNS on Windows Server 2016 Essentials. Shouldn't there be two entries here? One with the domain appended to the server name?

My 2012 server is setup with two entries as outlined above. IS this why my DNS isn't working?

Windows Server 2016 Essentials DNS Screenshot
Senior Technical Lead
Commented:
Hi,

I hope you have set static ip in the new server and preferred dns as itself?

Now set the DNS forwarders which pointing your isp's ip.

In DHCP scope option, make sure the entries are correct.
Mahlon OteroOwner / IT Specialist

Author

Commented:
It looks like all I had to do was set the DNS forwarders as @systech suggested. Once I did that I powered off my old server handling DNS and DHCP, and rebooted my new server.

Once everything powered back on I disabled the static ip on my devices and they all worked.

Thank you for your help!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial