+ Post New Thread
Results 1 to 7 of 7
Windows Server 2008 R2 Thread, DNS help please in Technical; I've been having problems with the network at one of my schools since introducing a new DC. The problems didn't ...
  1. #1
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,134
    Thank Post
    178
    Thanked 49 Times in 42 Posts
    Rep Power
    24

    DNS help please

    I've been having problems with the network at one of my schools since introducing a new DC. The problems didn't show untill I changed DNS servers listed in DHCP to put the new server first and remove the oldest server. I've read with interest the thread about DNS issues which prompted me to use Dcdiag to run the tests.

    There are currently 3 DC here: GC 2k8 r2, GB 2K3 and GA 2K3 (soon to be retired)

    Each the was performed on the local server.

    Dcdiag /c /q /s:gc
    Code:
    [GC] No security related replication errors were found on this DC!  To
    
             target the connection to a specific source DC use /ReplSource:<DC>.
    
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
    
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
    
             DC=ForestDnsZones,DC=school,DC=leicester,DC=sch,DC=uk
             Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
    
                Replicating Directory Changes In Filtered Set
             access rights for the naming context:
    
             DC=DomainDnsZones,DC=school,DC=leicester,DC=sch,DC=uk
             ......................... GC failed test NCSecDesc
    
             ** Did not run Outbound Secure Channels test because /testdomain: was
    
             not entered
    
             
    
             An error event occurred.  EventID: 0xC0002719
    
                Time Generated: 05/04/2011   10:24:52
    
                Event String:
    
                DCOM was unable to communicate with the computer 92.43.65.1 using any of the configured protocols.
    
             An error event occurred.  EventID: 0xC0002719
    
                Time Generated: 05/04/2011   10:25:18
    
                Event String:
    
                DCOM was unable to communicate with the computer 92.43.65.2 using any of the configured protocols.
    
             An error event occurred.  EventID: 0xC0002719
    
                Time Generated: 05/04/2011   10:28:50
    
                Event String:
    
                DCOM was unable to communicate with the computer 92.43.65.1 using any of the configured protocols.
    
             An error event occurred.  EventID: 0xC0002719
    
                Time Generated: 05/04/2011   10:29:16
    
                Event String:
    
                DCOM was unable to communicate with the computer 92.43.65.2 using any of the configured protocols.
    
             ......................... GC failed test SystemLog
    Dcdiag /c /q /s:gb
    Code:
             ** Did not run Outbound Secure Channels test
             because /testdomain: was not entered
    Dcdiag /c /q /s:ga
    Code:
            ** Did not run Outbound Secure Channels test
             because /testdomain: was not entered
             An Error Event occured.  EventID: 0xC0002719
                Time Generated: 05/04/2011   09:49:47
                (Event String could not be retrieved)
             An Error Event occured.  EventID: 0xC0002719
                Time Generated: 05/04/2011   09:50:34
                (Event String could not be retrieved)
             ......................... GA failed test systemlog
             [GA] No security related replication errors were found on this DC!  To target the connection to a specific source DC use /ReplSource:<DC>.
    
    DNS Tests are running and not hung. Please wait a few minutes...
    With all 3 servers the network setting for DNS point the itself then one of the other servers. 92.43.65.1 and 92.43.65.2 are the EMBC DNS servers as set in the in the forwards tab of DNS.

  2. #2

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    Did you prep the AD Schema for the 2008r2 DC before you promoted it?

    If you promoted the 2008r2 server without updating the schema first it will cause all sorts of problems.
    Last edited by iMash; 4th May 2011 at 11:35 AM.

  3. #3
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,134
    Thank Post
    178
    Thanked 49 Times in 42 Posts
    Rep Power
    24
    Yep, AFAIK it was all done correctly.

  4. #4

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    Did a quick search.

    Did you run /rodcprep also?

    check this link out for a possible solution.....

    Exchange 2010, Active Directory Blog: Replicating Directory Changes in Filtered Set access rights for the naming context

    While /rodcprep would suggest something to do with Read only domain controllers the page doesnt specifically refer to RODCs so may help.

    And I believe this updates the application partition on the schema and if my memory serves me correctly this is the partition that DNS resides on.

    Hope this helps,

    Ash
    Last edited by iMash; 4th May 2011 at 11:53 AM.

  5. #5
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,134
    Thank Post
    178
    Thanked 49 Times in 42 Posts
    Rep Power
    24
    I don't recall as server GC was added to the domain months ago. Is there any logs I can check? As I understand it before you make a server read only you need to have a existing 2008 writeable server?

  6. #6

    Join Date
    Mar 2011
    Location
    Coventry
    Posts
    61
    Thank Post
    12
    Thanked 6 Times in 6 Posts
    Rep Power
    8
    I have found the proper KB article referring to that error Here.

    It appears that, that error doesn't apply unless you are actually trying to add a RODC to the domain, which I assume is your case (i.e. your not trying to make the DC read only)?

    From the KB I understand that Dcdiag will throw this error until /rodcprep is run, but you can "disregard" it (running rodcprep wont actually add a Read Only, it just preps the schema for adding one in future).

    What specifically are the problems you are having with your network? I cant imagine this error being linked to that unless you are trying to implement a RODC.

    Ash
    Last edited by iMash; 4th May 2011 at 02:00 PM.

  7. Thanks to iMash from:

    Jobos (4th May 2011)

  8. #7
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,134
    Thank Post
    178
    Thanked 49 Times in 42 Posts
    Rep Power
    24
    Quote Originally Posted by iMash View Post
    What specifically are the problems you are having with your network? I cant imagine this error being linked to that unless you are trying to implement a RODC.

    Ash
    Thanks for the link that explains it nicely.

    I think the problem is sorted now as I rebooted the switches after school and everything seems ok. First thing this morning the HT said his and other people couldn't access their email. I spent some time on the HT's computer trying to get Outlook working and it still didn't work even after deleting the profile saying it couldn't find the Exchange server. It's all back up now but I could do without that first thing in the morning.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 24th March 2011, 01:58 PM
  2. ClearCloud DNS: An Anti Malware DNS
    By DaveP in forum IT News
    Replies: 2
    Last Post: 18th July 2010, 09:55 AM
  3. DNS Flush / DNS Register
    By brahma in forum Windows
    Replies: 1
    Last Post: 18th July 2008, 09:29 AM
  4. DNS Problems... DCHP correct, DNS wrong
    By burgemaster in forum Windows
    Replies: 7
    Last Post: 27th June 2008, 11:05 AM
  5. DNS
    By kerrymoralee9280 in forum Windows
    Replies: 6
    Last Post: 29th May 2007, 01:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •