dns errors and active directory errors

[Accipio]

Windows 2003 enterprise has developed numerous DNS error. Active Directory as a result or in addition has many problems too.

My DNS has crashed and all the zones are gone. Unable to add new zones by using wizard. Won't see Active Directory either.


The DNS server was unable to open Active Directory. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone.

Here is dcdiag:

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\RJB-S1
Starting test: Connectivity
The host 767124d9-4396-416d-a944-e0e78035b9df._msdcs.Netbuilds.local could no
t be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(767124d9-4396-416d-a944-e0e78035b9df._msdcs.Netbuilds.local) couldn't be
resolved, the server name (rjb-s1.Netbuilds.local) resolved to the IP
address (10.20.10.9) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... RJB-S1 failed test Connectivity

Doing primary tests

Testing server: Default-First-Site\RJB-S1
Skipping all tests, because server RJB-S1 is
not responding to directory service requests

Running partition tests on : TAPI3Directory
Starting test: CrossRefValidation
......................... TAPI3Directory passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... TAPI3Directory passed test CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : Netbuilds
Starting test: CrossRefValidation
......................... Netbuilds passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Netbuilds passed test CheckSDRefDom

Running enterprise tests on : Netbuilds.local
Starting test: Intersite
......................... Netbuilds.local passed test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... Netbuilds.local failed test FsmoCheck

Here is Netdiag:

Computer Name: RJB-S1
DNS Host Name: rjb-s1.Netbuilds.local
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 10, GenuineIntel
Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS Async Adapter' may not be working because it has not r
eceived any packets.



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : rjb-s1.Netbuilds.local
IP Address . . . . . . . . : 10.20.10.9
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 10.20.10.1
Primary WINS Server. . . . : 10.20.10.9
Dns Servers. . . . . . . . : 10.20.10.9


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{C4E06F6B-F7F0-47CC-902F-E1A52F78E6F6}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative DNS server for the name
'rjb-s1.Netbuilds.local.'. [WSAEADDRNOTAVAIL ]
The name 'rjb-s1.Netbuilds.local.' may not be registered in DNS.
[WARNING] Cannot find a primary authoritative DNS server for the name
'rjb-s1.Netbuilds.local.'. [WSAEADDRNOTAVAIL ]
The name 'rjb-s1.Netbuilds.local.' may not be registered in DNS.
[WARNING] Cannot find a primary authoritative DNS server for the name
'rjb-s1.Netbuilds.local.'. [ERROR_TIMEOUT]
The name 'rjb-s1.Netbuilds.local.' may not be registered in DNS.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '
0.0.0.0'. Please wait for 30 minutes for DNS server replication.
[FATAL] No DNS servers have the DNS records for this DC registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{C4E06F6B-F7F0-47CC-902F-E1A52F78E6F6}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{C4E06F6B-F7F0-47CC-902F-E1A52F78E6F6}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped


LDAP test. . . . . . . . . . . . . : Failed
[FATAL] Cannot do Negotiate authenticated ldap_bind to 'rjb-s1.Netbuilds.local': L
ocal Error.
[FATAL] No LDAP servers work in the domain 'NETBUILDS'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

 

[pagy]

I came across this which may help although it is for Windows 2000 it might be worth checking;

http://support.microsoft.com/kb/316685

Paul
MCSE 2003
MCSA 2003
MCITP Enterprise Administrator

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[Accipio]

Thank You Paul,

I say that one two. None of security log conditions apply and the registry is set to the recommended.

I have uninstalled DNS once and it came up with the old settings which were working and included the _msdcs zone, but after a system reboot all went back to the current settings. I believe it is a DNS issue mainly and I am unable to rebuild the DNS or I am missing something. The network has a remote site that is using W2K server across a VPN tunnel as a back up WINS and DNS. I also have had to move DHCP to the Router as the W2003 box was scerwing up. The DNS and active directory was working fine adter though.

 

[Accipio]

Looks like DNS and AD is now mostly running an dplaying well together. Just rebuilt and reinstalled DNS

Thanks for you assistance all.