troubleshooting Question

Event error 4015 on RODC on perimeter network

Avatar of RhoSysAdmin
RhoSysAdminFlag for United States of America asked on
Windows Server 2012NetworkingActive DirectoryDNS
10 Comments1 Solution23 ViewsLast Modified:
We have a pair of W2K12 RODC's on a perimeter network. They've been around for a while now.  We recently discovered both are seeing the same DNS error on both of them. This error repeats every 5 minutes.

Log Name:      DNS Server
Source:        Microsoft-Windows-DNS-Server-Service
Date:          6/7/2021 9:36:13 PM
Event ID:      4015
Task Category: None
Level:         Error
Keywords:      (131072)
User:          SYSTEM
Computer:      RODC2
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
Event Xml:

I'm wondering if these errors are due to the network settings on each RODC, both of which point to 127.0.0.1 as its preferred DNS server, and the closest writable DC as its alternate DNS server.  These settings are based on recommendations in Microsoft's article - Modify the DNS client settings of an RODC.

I ran a "dcdiag /test:dns" on the RODC and saw this :

DNS server: 10.2.##.xx (dc1.xxx.com.)
1 test failure on this DNS server
PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 10.2.##.xx              

DNS server: 10.2.##.yy (dc2.xxxx.com.)
1 test failure on this DNS server
PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 10.2.##.yy              

"dc1" and "dc2" are in the home "site" and are not directly accessible by the RODC (in the perimeter network).  There are two writable DC's in a neighboring site to the perimeter network that did not generate any errors.  

So is my problem in my network settings on the RODC's or is this a red herring I should just ignore.



ASKER CERTIFIED SOLUTION
RhoSysAdmin

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 10 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros