DNS issue on clients

[chazzy2501]

Adapter Name : {BDC08E9C-FA4C-4B56-9B32-5BC54B8DDD08}
Host Name : wardle
Primary Domain Suffix : DCC-SCH-4505.local
DNS server list :
10.44.8.1
Sent update to server : 10.1.1.1
IP Address(es) :
10.44.8.84

The reason the update request failed was because of a system problem. For specific error code, see the record data displayed below.


My problem is that I don't know why it would send the update to the address 10.1.1.1 I don't use that range. I think this maybe a setting on one of the servers that predates my employment. (I know the domain ipaddress range used to be different)

I've checked every DNS setting I can see but find no reference to the address 10.1.1.1?

[jinnantonnixx]

Have you set up any DNS forwarding or transfer zones?

If you type
NSLOOKUP 10.1.1.1
does this return a resolved name?

It seems an odd address as it's not on the same subnet, unless you're using class A masks.

[chazzy2501]

i'm using 10.44.8.1 to 10.44.11.254 SNM 255.255.252.0. When I did the nslookup it queried my PDC (10.44.8.1) but the request timed out.

is this a GPO thing? a DHCP or DNS config error?

I've only started to see this error since I turned on the DNS Scavenge option yesterday. So this may be a long long ago bad config.

[jinnantonnixx]

i'm using 10.44.8.1 to 10.44.11.254 SNM 255.255.252.0. When I did the nslookup it queried my PDC (10.44.8.1) but the request timed out.

That's OK, it just means there's no reverse lookup entry for that address. Nothing to worry about, but if it did show a machine it might have shed some light on what it could be.

Have you set up any zone transfers? In DNS, right-click your forward lookup zone and see if there are any entries under properties>zone transfers.

Also in DNS manager, select your forward lookup zone and sort your zone by the 'Data' field, see if that IP address shows up in the list.

[chazzy2501]

No entry in the data field. No forward lookup zones set.

I did find this error in the dns logs, seems I've had it forever!

"The zone %1 was previously loaded from the directory partition %2 but another copy of the zone has been found in directory partition %3. The DNS Server will ignore this new copy of the zone. Please resolve this conflict as soon as possible."

No idea what its on about.

[jinnantonnixx]

Have you only got one DNS server? Did you have another one at some point?

This is supposed to sort itself out, but it doesn't look like your system will. There's a support article explaining how to resolve it.
Event ID 4515 is logged in the DNS Server log in Windows Server 2003

[chazzy2501]

no I have 2. 10.44.8.1 the PDC and 10.44.8.15 the SDC

[jinnantonnixx]

And they're correctly configured as primary and secondary? (Best not assume anything!)

From DNS settings, Right-click your FLZ>Properties>Name Servers. What's in here?

These are the authoritative name servers for the zone. If you see our friend 10.1.1.1 you can delete him.

[chazzy2501]

I looked into the Names Server tab and both name servers are correct. No mystery 10.1.1.1 server. I've scoured GPO and DHCP for a 10.1.1.1 entry and no luck. Where is this setting coming from?

[jinnantonnixx]

Bit of a long shot, but start up RegEdit and search the registry key HKEY_LOCAL_MACHINE on the DNS servers for 10.1.1.1