Any Web Domain Domain cannot be reached

[beancole]

I recently added a new DC to an existing domain. The new DC is server 2012r2. Its been added to a domain forest/function level of 2008r2.

 

I built the new DC (server 2012) about a week ago it is a vanilla install. I then installed DNS and had it mirror my existing DC. I then installed active directory and promoted it to DC with the new server 2012 method (DCPROMO doesnt work)

 

I have been getting this error from spiceworks every hour or so since I did the DC promo. Any Web Domain Domain cannot be reached - applefields.york.sch.uk is not responding to HTTP

 

The New DC is in the correct OU in active directory and the default domain controller policy is applied.

 

I had a couple of errors when I first upgraded to DC but they were that I hadn't installed the wildcard cert which is there now and I had an SceCli error as an old admins name was still in the domain controller default policy. They have now been cleared.

 

There are 2 things currently popping up in the event logs a windows time service error (I just need to edit my bios time to match) and a Perflib error I am struggling to research.

 

Is there something I am missing?

[JoHimself]

I assume you are talking about internal resolution as the address you supplied correctly redirects to Home | Applefields School from where I am.

 

Have you changed any settings in DHCP or are internal clients still looking at the old DC for DNS? Can you perform NSlookups from the DCs? What happens when you perform NSlookups from the clients (try with both the default DNS server assigned by DHCP and the other DNS server)?

[beancole]

It seems like its a problem with spiceworks its seeing an unknown domain registrar. I am just going to turn the monitor off. I would however like to test my DC is actually working.

 

Apart from seeing a computer with no domain trust relationship is there a way to see if machines are authenticating to a certain DC. I have gone to individual machines and just done an echo %logonserver% and its always my primary.

 

I also tried turning off my primary DC but I just got no logon servers available which if I remember rightly is what I should receive.