+ Post New Thread
Results 1 to 4 of 4
Windows Server 2008 Thread, DNS serious issues in Technical; Hi guys! Im writing here as I have few problems with my dns configuration. Let me give u some details ...
  1. #1

    Join Date
    Sep 2010
    Posts
    9
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    DNS serious issues

    Hi guys!
    Im writing here as I have few problems with my dns configuration.
    Let me give u some details first.
    I do have two networks in my school. Admin network is fine and do not have any problems with the dns.
    On my curriculum network I have 3 dc`s:
    dmhsc (primary, pdc, master, 2008)
    dmhsc-dc (ad, 2008 R2)
    printserver (ad, printserver 2008 R2)
    On this network I have very slow logon times, especially on applying computer settings when it takes good 3-5 mins sometimes longer. Also very strange when I run gpupdate /force on client machines and than gpresult I see that computer settings were picked up from different server than user settings, ex computer settings from dmhsc-dc and user settings from printserver. This happens most of the times 90%.
    I have started to do some troubleshooting of my dc`s.

    When I run netshare all servers have correct permissions to sysvol, replication works fine as well.

    I did run dcdiag on all servers:
    dmhsc - passes everything
    dmhsc-dc - passes everything
    printserver - failed on
    Running enterprise tests on : draytonmanor.ealing.sch.uk
    Starting test: LocatorCheck
    Error: The server returned by DsGetDcName() did not match
    DsListRoles() for the PDC.

    Netdiag
    dmhsc - passed everything

    netdom query /domain:mydomain fsmo
    dmhsc - passed everything, pointed everything to dmhsc
    dmhsc-dc - passed everything, pointed everything to dmhsc
    printserver - passed everything, pointed everything to dmhsc

    I did look at my dns on dmhsc and I don`t think it looks right. Insted of having only dmhsc under first site domain I have all of my dc`s. I have attached screenshots and would be very greatful if you could have a look.

    On my dmhsc I also get loads of security-kerberos event id 4 errors in event log.
    I also got quiet lots of dns-server-service event id 4013 errors in event log under dns.
    I did try to follow the guide hxxp://sgwindowsgroup.org/blogs/panda/archive/2010/03/19/client-going-to-different-domain-controller-randomly-for-authentications-cause-and-solution.aspx and deleted other servers but they came back at the same place after a while.

    Thanks for any help in advance guys!
    screen1.JPGscreen2.JPGscreen3.JPG
    Last edited by dombera; 11th May 2011 at 12:15 PM.

  2. #2

    Join Date
    Jan 2009
    Location
    Northants
    Posts
    146
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    13
    Hi,

    Your DNS entries are correct, all the DC's in the site should show up in the site name as this is where is queried to find DC's to process logon's. Have you got all the subnets and stuff configured properly in AD Sites & Services, this could result in the error on printserver with DC diag.

    Also which DNS servers are each of the DC's pointing at?

    Is one of your servers particularly slower than the others normally, we had a slow startup problem at one stage and found it was one DC causing the problem. We now run only 2 DC's for 1000 PC's on the site instead of 3.

    The other things that can affect the time taken for the computers to pass Applying computer settings are the group policies check this thread of advice GPO Bloat

    Skr

  3. #3

    Join Date
    Sep 2010
    Posts
    9
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi! Thank for the replay. I did have a look at ad sites & services and looks fine as each server points to another ones. I don`t have anything under subnets in ad sites & services.
    Regarding DNS only dmhsc is dns server as I have only one. All other servers have it`s ip under tcp/ip settings so they know it`s a dns server. I`m gonna have a look at the link you provided- thanks.

  4. #4

    Join Date
    Jan 2009
    Location
    Northants
    Posts
    146
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    13
    I would strongly recommend that you put the network subnets into AD sites and services, even if you only have one subnet on 1 site, it's still "The Right Thing to do"

    From a relliability and resillience point of view it would be best if you had 2 DNS servers, DNS should automatically be installed with the DC role on the 2008 servers so it's probably already there, have a check. May also reduce the load on a single server if there were 2.

    Skr
    Last edited by SkreeM1980; 11th May 2011 at 01:02 PM. Reason: Added more comments about DNS



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 24th March 2011, 02:58 PM
  2. DNS - Issues
    By jreimer in forum Windows
    Replies: 3
    Last Post: 16th December 2008, 12:08 PM
  3. DNS issues
    By plexer in forum Windows
    Replies: 9
    Last Post: 17th September 2008, 11:19 AM
  4. DNS/DHCP Issues
    By link470 in forum Windows
    Replies: 1
    Last Post: 11th March 2008, 09:33 AM
  5. DNS Issues
    By FN-GM in forum Windows
    Replies: 14
    Last Post: 18th January 2008, 07:01 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •