Unable to resolve forward lookup

[tim28375]

I am having an issue with forward lookup on 2 PC's
I have tried many different things to resolve however I have run out of things to try. Below is a list of things I have tried and all have been unsuccessful in resolving the issue. I have included netdiag log to show errors.

Issue: - Unable to resolve name to IP via DNS, WINS working correctly. DNS works correctly when connecting through VPN.
Issue is affecting both LAN card and Wireless card in laptop.

DNS is working fine on all PC's (600+) and servers only affected 2 PC's.

I can resolve reverse lookup.
DNS AD integrated ran DCdiag and NetDiag on all DNS server with no problems.

Reset IP Stack and Winsock.

Removed PC form domain and readded using different name.

Removed all DNS entrys and DHCP leases.

Confirmed that RPC communication is working between host and server using RPCPING.

Manually set DNS to different server.


NETDIAG LOG BELOW

Computer Name: *********
DNS Host Name: *********.******.co.uk
System info : Windows 2000 Professional (Build 6001)
Processor : x86 Family 15 Model 104 Stepping 2, AuthenticAMD
Hotfixes : none detected


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Check Point Virtual Network Adapter For SecureClient' may not be working.
[WARNING] The net card 'Check Point Virtual Network Adapter For SecureClient - SecuRemote Miniport' may not be working.
[WARNING] The net card 'Teredo Tunneling Pseudo-Interface' may not be working.
GetStats failed for '6TO4 Adapter'. [ERROR_GEN_FAILURE]



Per interface results:

Adapter : {83A1B2DE-16AA-4196-9E63-C043020C37DB}

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.

Host Name. . . . . . . . . : ***********
IP Address . . . . . . . . : 0.0.0.0
Subnet Mask. . . . . . . . : 0.0.0.0
Default Gateway. . . . . . : 0.0.0.0
Dns Servers. . . . . . . . :


Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : **********.*******.co.uk
IP Address . . . . . . . . : 10.0.0.86
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.0.30.3
Primary WINS Server. . . . : 10.0.10.30
Secondary WINS Server. . . : 10.0.10.156
Dns Servers. . . . . . . . : 10.0.10.30
10.0.10.156


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{047B0F44-9DD4-47B4-B962-139313F4039B}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Failed
[FATAL]: All DNS servers authoritative for '*********.********.co.uk' are currently down.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{047B0F44-9DD4-47B4-B962-139313F4039B}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{047B0F44-9DD4-47B4-B962-139313F4039B}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Failed
[FATAL] Cannot find DC in domain '*************'. [ERROR_NO_SUCH_DOMAIN]


DC list test . . . . . . . . . . . : Failed
'PARKFARM_NT': Cannot find DC to get DC list from [test skipped].


Trust relationship test. . . . . . : Failed
'**************': Cannot find DC to get DC list from [test skipped].
[FATAL] Secure channel to domain '**************' is broken. [RPC_S_SERVER_UNAVAILABLE]


Kerberos test. . . . . . . . . . . : Skipped
'PARKFARM_NT': Cannot find DC to get DC list from [test skipped].


LDAP test. . . . . . . . . . . . . : Failed
Cannot find DC to run LDAP tests on. The error occurred was: The specified domain either does not exist or could not be contacted.


[WARNING] Cannot find DC in domain '**************'. [ERROR_NO_SUCH_DOMAIN]


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Passed
Service status is: Started
Service startup is: Automatic
IPSec service is available, but no policy is assigned or active
Note: run "ipseccmd /?" for more detailed information


The command completed successfully




MCSE 2003
HP APS

 

[SimonDavies]

can you ping the name space for your AD domain?
You may want to see about finding NLTEST.EXE from the resource kit and doing a new Secure Channel connection (nltest /? will give you the switches but off the top of my head it's nltest /sc_reset:domain name) which should give you the secure channel back to the domain.

I have to say that looking at the results it would appear that the two machines having issues aren't actually part of the domain structure that your DNS servers are or their computer accounts aren't right some how.

Do the NLTEST reset and take it from there.

Simon

The real world is not about exam scores, it's about ability.

 

[Pipeops]

Did you check you DHCP server to see if there are no reserved entries? Also, is the IP address assigned to anything in the DHCP leases? Can you look these up on the dns server?