DCDIAG /test:dns error? 1

[pinkpanther56]

When i run this on our DC it returns this error which i believe refers to a trusted NT4 domain that is no longer present.

"TEST: Delegations (Del)
Error: DNS server: server1.domain.co.uk. IP:10.*.*.* [Broken delegated domain admin.domain.co.uk.]"

When i look in the DNS console under forward lookup zones then domain.co.uk i see this:

domain.co.uk
_msdcs
_sites
_tcp
_udp
admin (this is what i think the problem refers to)
-DomainDnsZones
-ForestDnsZones

The admin folder has the same grey icon as the _msdcs folder.

The question is can i just delete this zone?

This is a Windows 2003 domain.

Thanks.

 

[ShackDaddy]

If there are no longer any domain controllers that service that domain or DNS/AD servers that are actually authoritative for that domain, then you can delete it, since there are no subjects (users/groups) or objects (resources) that depend on the DNS relationship existing.

ShackDaddy

 

[pinkpanther56]

Excellent thanks.