Jump to content

Recommended Posts

Posted

Good evening all.

 

This morning I came into work to find that peeps could not log on. I looked at the DNS records on our 2 DC's - sure, the zones where there but were missing the rather vital SRV/KPASSWD.LDAP records :eek: :eek: So I restart both DC's and luckily the zones started populating with all the proper records. Despite this, I still had to manually add in a few A records for some of the servers. event logs on both DC's show nothing out of the ordiniary and DC diag mentions a kerberos error which I'm aware of. But I'm worried as I'm not sure what could have deleted those records :eek: Anyone else come across this before?

Posted
Anyone else come across this before?

 

Nope but just to get it out of the way, do you have scavenging turned on?

 

If they go missing again just restarting the netlogon service should be enough to get those records back. But the curious bit is why it hadn't already done that i.e. I thought a DC's netlogon was supposed to register the DNS records all over again every hour (which is why you don't need to worry about these critical records being scavenged)?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...