Printable View
You can have just Dynamic Updates, but I agree Secure Updates are better. For those that don't know, Secure Updates basically means only authenticated clients in the domain can make changes to DNS. This stops any external or rogue devices messing your DNS setup!Quote:
Originally Posted by ricki
Again, like Zone Transfers, Secure Updates has to be specified on the Forward and all Reverse Lookup Zones in turn.
@Michael
Yes I enabled zone transfers on both servers for forward and reverse look up zones
The 2K3 server is the role holder for all FSMO's
The 2K8 Server is a GC
Ive just set the IP DNS config to your recommendations (the 2k8 server was pointing to the 2k3 as primary DNS)
@ricki
The dynamic updates was secure - Ive reduced it to none secure (grasping at straws now)
Zone transfers is set to all DCs
Dcdiag on the 2k3 server doesnt return any errors.
The repadmin on both servers says successfull or all items
Thanks both for your help, please keep the ideas coming.
just to add
Both servers have their firewalls disabled, and there is no SYSVOL share on the 2k8 server
FIXED IT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
I *think* doing this has fixed it Using the BurFlags registry key to reinitialize File Replication Service replica sets (I tired this on Monday and it didnt work)
DCdiag doesnt list any more errors!, the SYSVOL is there!
Hopefully it will stay working
Thank you everyone for your help and support, its been much needed!
Thanks for the feedback / update :)
Good job, glad you got it sorted. The last time I used Burflags was between a 2000/2003 server, many moons ago!