dcdiag /test:DNS Broken Delegated Domain

[jslate1980]

Hi

 

I am having a few issues with DNS onsite, where stale records are not being removed even though Aging/Scavenging is setup.

I cannot find any errors in DNS Events on the three DCs we have onsite, but when I ran dcdiag /test: DNS , I am getting a delegation error Broken delegated domain See Below:

 

H:\>dcdiag /test:DNS

Directory Server Diagnosis

Performing initial setup:
  Trying to find home server...
  Home Server = RSDC01
  * Identified AD Forest.
  Done gathering initial info.

Doing initial required tests

  Testing server: Middle-School\RSDC01
     Starting test: Connectivity
        ......................... RSDC01 passed test Connectivity

Doing primary tests

  Testing server: Middle-School\RSDC01

     Starting test: DNS

        DNS Tests are running and not hung. Please wait a few minutes...
        ......................... RSDC01 passed test DNS

  Running partition tests on : ForestDnsZones

  Running partition tests on : DomainDnsZones

  Running partition tests on : Schema

  Running partition tests on : Configuration

  Running partition tests on : School

  Running enterprise tests on : School.net
     Starting test: DNS
        Test results for domain controllers:

           DC: RSDC01.School.net
           Domain: School.net


              TEST: Delegations (Del)
                 Error: DNS server: rsdc01.school.net. IP:172.20.1.10
                 [broken delegated domain school.net.School.net
.
                 ]
                 Error: DNS server: rsdc02.school.net. IP:172.20.1.11
                 [broken delegated domain school.net.School.net
.
                 ]
                 Error: DNS server: rsdc03.school.net. IP:172.20.1.12
                 [broken delegated domain school.net.School.net
.
                 ]

        Summary of test results for DNS servers used by the above domain
        controllers:

           DNS server: 172.20.1.10 (rsdc01.school.net.)
              1 test failure on this DNS server

           DNS server: 172.20.1.11 (rsdc02.school.net.)
              1 test failure on this DNS server

           DNS server: 172.20.1.12 (rsdc03.school.net.)
              1 test failure on this DNS server

        Summary of DNS test results:

                                           Auth Basc Forw Del  Dyn  RReg Ext
           _________________________________________________________________
           Domain: School.net
              RSDC01                       PASS PASS PASS FAIL PASS PASS n/a

        ......................... School.net failed test DNS

H:\>

 

Any suggestions on what my issues are and how to fix it?

 

Jon

[pantscat]

Hello

 

It'll be because ".net" is a top level domain, therefore "school.net.School.net" is breaking this.

 

I suspect it's a DNS record with an incorrect FQDN or possibly an incorrectly named zone.