talksr Posted September 24, 2015 Posted September 24, 2015 Hi, I have two 2012 servers. The FRDC runs DHCP, DNS, Active Directory, and Ranger (from RM). I then have a second 2012 server which is joined to the domain as a member. This server is responsible for backing up via Backup Exec and runs Sophos Enterprise Management Console. If I wanted to browse to server one, I would just enter in the hostname: \\stm-sr-001. If I attempt to browse to server two: \\stm-sr-002\ it refuses to resolve unless I am browsing from server one. If I use a client computer to browse to server two, it refuses unless I enter in it's IP address: \\10.75.44.11 Both servers have firewall disabled. Server two has a statically assigned IP address and its dns points to server one. Am I doing something wrong?
Gaz Posted September 24, 2015 Posted September 24, 2015 Is there a DNS entry for server 2 on server 1? You said that dns points to server 1 but I assume you mean in the tcpip settings.
talksr Posted September 24, 2015 Author Posted September 24, 2015 Is there a DNS entry for server 2 on server 1? You said that dns points to server 1 but I assume you mean in the tcpip settings. Hi, yes I meant the TCPIP settings. As far as I know, there is no entry for server two on the DNS for server one. Is there any way I can check this?
Michael Posted September 24, 2015 Posted September 24, 2015 You need to make sure DNS Zones are allowed to replicate - server to server - by default this is switched off.
Gaz Posted September 24, 2015 Posted September 24, 2015 Yeah go into DNS on server 1 and look for stm-sr-002 under forward dns entry's there should be a reverse one too.
talksr Posted September 24, 2015 Author Posted September 24, 2015 You need to make sure DNS Zones are allowed to replicate - server to server - by default this is switched off. Ok thanks. Do you know where exactly this option is? Yeah go into DNS on server 1 and look for stm-sr-002 under forward dns entry's there should be a reverse one too. Hi, thanks, have taken a look and all I have in forward dns entries is shown in the attached screenshot. Reverse is empty.
win Posted September 24, 2015 Posted September 24, 2015 Sounds like you're missing a dns entry. If it is there and you're still having problems you can add it to the lmhosts file to make it work, but this should be a short term solution.
Michael Posted September 24, 2015 Posted September 24, 2015 Ok thanks. Do you know where exactly this option is? Hi, thanks, have taken a look and all I have in forward dns entries is shown in the attached screenshot. [ATTACH=CONFIG]32299[/ATTACH] Reverse is empty. Open DNS Server, then in turn right click each Zone (expand Forward and Reverse), select Properties, then select the Zone Transfers tab and enable 'Allow zone transfers'. I generally select 'To any server' and have never had any problems.
Gaz Posted September 24, 2015 Posted September 24, 2015 Open DNS Server, then in turn right click each Zone (expand Forward and Reverse), select Properties, then select the Zone Transfers tab and enable 'Allow zone transfers'. I generally select 'To any server' and have never had any problems. I was under the impression zone transfers was for multiple DNS servers, hes only got 1. In your screen shot click on stm.internal, inside that folder you should have all the DNS entrys for all of the devices on your network. There should be one for stm-sr-002
Michael Posted September 24, 2015 Posted September 24, 2015 (edited) I was under the impression zone transfers was for multiple DNS servers, hes only got 1. In your screen shot click on stm.internal, inside that folder you should have all the DNS entrys for all of the devices on your network. There should be one for stm-sr-002 The discussion starter clearly says server 1 and server 2? But you're right one DNS server, it wouldn't apply. The second server may not be a DC, but it could be a DNS server. Edited September 24, 2015 by Michael
Quackers Posted September 24, 2015 Posted September 24, 2015 What happens when you use the FQDN instead of just the computer name? i.e. \\stm-sr-002.stm.internal ?
Oaktech Posted September 24, 2015 Posted September 24, 2015 Also, in whatever DNS server you are using is the reverse DNS zone set up correctly if at all? I've seen plenty of installs where this is isn't done. https://technet.microsoft.com/en-us/library/cc961414.aspx
talksr Posted December 3, 2015 Author Posted December 3, 2015 What happens when you use the FQDN instead of just the computer name? i.e. \\stm-sr-002.stm.internal ? Sorry for my late reply, I have had more critical issues to deal with. I can't use the FQDN as this is a secondary server added to the domain as a member. Its hostname is: stm-sr-002. I have tried: stm-sr-002.stm.internal which is as close as the FQDN I can get, but I just get the same error...
talksr Posted December 3, 2015 Author Posted December 3, 2015 Also, in whatever DNS server you are using is the reverse DNS zone set up correctly if at all? I've seen plenty of installs where this is isn't done. https://technet.microsoft.com/en-us/library/cc961414.aspx The DNS server is on our primary server stm-svr-001, it has an empty reverse section as below. I have never seen anything in this area:
Michael Posted December 3, 2015 Posted December 3, 2015 In the static IP config on each server, are they pointing to each other? For example: Server 1 192.168.0.99 (itself) 192.168.0.98 (second server) Server 2 192.168.0.98 (itself) 192.168.0.99 (first server) The run ipconfig /registerdns in an elevated Command Prompt on each server. 1
talksr Posted December 3, 2015 Author Posted December 3, 2015 In the static IP config on each server, are they pointing to each other? For example: Server 1 192.168.0.99 (itself) 192.168.0.98 (second server) Server 2 192.168.0.98 (itself) 192.168.0.99 (first server) The run ipconfig /registerdns in an elevated Command Prompt on each server. I have run the command you suggested. Here are the details: Server 1 (Windows 2012 FRDC with Ranger 8, DHCP, DNS, Active Directory and Group Policy: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331i Adapter Physical Address. . . . . . . . . : 30-8D-99-FC-47-B2 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::c88d:8338:ba95:2bd3%12(Preferred) IPv4 Address. . . . . . . . . . . : 10.75.44.10(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.75.44.1 DHCPv6 IAID . . . . . . . . . . . : 305171865 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-4B-BA-52-30-8D-99-FC-47-B2 DNS Servers . . . . . . . . . . . : ::1 127.0.0.1 172.30.178.53 NetBIOS over Tcpip. . . . . . . . : Enabled Server 2 (Windows Server 2012, Backup Exec 2015, Sophos Enterprise Console, connected to FRDC as a member (just like a desktop computer): Connection-specific DNS Suffix . : Description . . . . . . . . . . . : HP Ethernet 1Gb 2-port 330i Adapter Physical Address. . . . . . . . . : 40-A8-F0-75-CE-E8 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::2896:b51:4fbc:2b61%12(Preferred) IPv4 Address. . . . . . . . . . . : 10.75.44.11(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.75.44.1 DHCPv6 IAID . . . . . . . . . . . : 306227440 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-52-3F-D9-40-A8-F0-75-CE-E8 DNS Servers . . . . . . . . . . . : 10.75.44.10 NetBIOS over Tcpip. . . . . . . . : Enabled I notice again in the DNS for our FRDC we have "::1" I am going to take it out.
Michael Posted December 3, 2015 Posted December 3, 2015 So you only have one DNS server (from what you're saying)? DNS looks fine, but I'm guessing 172.30.178.53 is your external DNS? This should be within DNS Server (Forwarders) and not in the static config.
talksr Posted December 3, 2015 Author Posted December 3, 2015 So you only have one DNS server (from what you're saying)? DNS looks fine, but I'm guessing 172.30.178.53 is your external DNS? This should be within DNS Server (Forwarders) and not in the static config. Hello, Yes we have just one DNS server which is on our FRDC server 1 named stm-sr-001. 172.30.178.53 is our external LGFL ISP dns. DIdn't realise this should be in forwarders. If I put it in forwarders as the top IP, what would I put in the static part of ipconfig?
Michael Posted December 3, 2015 Posted December 3, 2015 Server 1 DNS should read: 10.75.44.10 Server 2 DNS should read: 10.75.44.10 DNS Forwarder: 172.30.178.53 So in English, your DNS requests are made to your one DNS server (on site), but when someone tries searching for bbc (for example), your DNS server forwards the request to LGFL's DNS server as it won't know the answer. Because the bbc is a popular request, odds are (in this example) the LGFL server knows the answer. If it didn't, it would keep searching until it found the answer and return the bbc home page. If it couldn't resolve bbc, this is why sometimes you'll see Page Cannot be Displayed or similar.
talksr Posted December 3, 2015 Author Posted December 3, 2015 Server 1 DNS should read: 10.75.44.10 Server 2 DNS should read: 10.75.44.10 DNS Forwarder: 172.30.178.53 So in English, your DNS requests are made to your one DNS server (on site), but when someone tries searching for bbc (for example), your DNS server forwards the request to LGFL's DNS server as it won't know the answer. Because the bbc is a popular request, odds are (in this example) the LGFL server knows the answer. If it didn't, it would keep searching until it found the answer and return the bbc home page. If it couldn't resolve bbc, this is why sometimes you'll see Page Cannot be Displayed or similar. Thanks, all makes sense to me. I have changed where appropriate, on the FRDC the dns is 127.0.0.1 which is the same as 10.75.44.10. However, at the moment, I am still unable to resolve the hostname of server two: stm-sr-002. IP works fine, but not the hostname.
Michael Posted December 3, 2015 Posted December 3, 2015 Have you disabled the software firewall in Windows Server? And do you have any VLANs configured?
talksr Posted December 3, 2015 Author Posted December 3, 2015 (edited) Have you disabled the software firewall in Windows Server? And do you have any VLANs configured? No firewalls anywhere! It is even disabled in GP. No vlans either, flat network. Strange as I can browse using IP but not hostname. I just get the above error. Edited December 3, 2015 by talksr
Michael Posted December 3, 2015 Posted December 3, 2015 I know you've tried your hostname, but what about the FQDN? server.domainname.com\sharename for example. 1
talksr Posted December 3, 2015 Author Posted December 3, 2015 I know you've tried your hostname, but what about the FQDN? server.domainname.com\sharename for example. If I put in the FQDN, I get the following error: If I add a share-name to the end such as: \\stm-sr-002.stm.internal\data I get the following error:
chrisbsc Posted December 3, 2015 Posted December 3, 2015 I have had similar problems and found it to be 'offline files' for us the resolution was on the following website Windows Domain DFS namespace – access is denied using domain FQDN, access allowed using server UNC paths directly | SIRKit.ca Technical Blog - News, Advisories & How-To 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now