DNS help please

[Jobos]

I've been having problems with the network at one of my schools since introducing a new DC. The problems didn't show untill I changed DNS servers listed in DHCP to put the new server first and remove the oldest server. I've read with interest the thread about DNS issues which prompted me to use Dcdiag to run the tests.

 

There are currently 3 DC here: GC 2k8 r2, GB 2K3 and GA 2K3 (soon to be retired)

 

Each the was performed on the local server.

 

Dcdiag /c /q /s:gc

[GC] No security related replication errors were found on this DC!  To

        target the connection to a specific source DC use /ReplSource:.

        Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 

           Replicating Directory Changes In Filtered Set
        access rights for the naming context:

        DC=ForestDnsZones,DC=school,DC=leicester,DC=sch,DC=uk
        Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 

           Replicating Directory Changes In Filtered Set
        access rights for the naming context:

        DC=DomainDnsZones,DC=school,DC=leicester,DC=sch,DC=uk
        ......................... GC failed test NCSecDesc

        ** Did not run Outbound Secure Channels test because /testdomain: was

        not entered

        

        An error event occurred.  EventID: 0xC0002719

           Time Generated: 05/04/2011   10:24:52

           Event String:

           DCOM was unable to communicate with the computer 92.43.65.1 using any of the configured protocols.

        An error event occurred.  EventID: 0xC0002719

           Time Generated: 05/04/2011   10:25:18

           Event String:

           DCOM was unable to communicate with the computer 92.43.65.2 using any of the configured protocols.

        An error event occurred.  EventID: 0xC0002719

           Time Generated: 05/04/2011   10:28:50

           Event String:

           DCOM was unable to communicate with the computer 92.43.65.1 using any of the configured protocols.

        An error event occurred.  EventID: 0xC0002719

           Time Generated: 05/04/2011   10:29:16

           Event String:

           DCOM was unable to communicate with the computer 92.43.65.2 using any of the configured protocols.

        ......................... GC failed test SystemLog

 

Dcdiag /c /q /s:gb

        ** Did not run Outbound Secure Channels test
        because /testdomain: was not entered

 

Dcdiag /c /q /s:ga

       ** Did not run Outbound Secure Channels test
        because /testdomain: was not entered
        An Error Event occured.  EventID: 0xC0002719
           Time Generated: 05/04/2011   09:49:47
           (Event String could not be retrieved)
        An Error Event occured.  EventID: 0xC0002719
           Time Generated: 05/04/2011   09:50:34
           (Event String could not be retrieved)
        ......................... GA failed test systemlog
        [GA] No security related replication errors were found on this DC!  To target the connection to a specific source DC use /ReplSource:.

DNS Tests are running and not hung. Please wait a few minutes...

 

With all 3 servers the network setting for DNS point the itself then one of the other servers. 92.43.65.1 and 92.43.65.2 are the EMBC DNS servers as set in the in the forwards tab of DNS.

[iMash]

Did you prep the AD Schema for the 2008r2 DC before you promoted it?

 

If you promoted the 2008r2 server without updating the schema first it will cause all sorts of problems.

Edited May 4, 2011 by iMash

[Jobos]

Yep, AFAIK it was all done correctly.

[iMash]

Did a quick search.

 

Did you run /rodcprep also?

 

check this link out for a possible solution.....

 

Exchange 2010, Active Directory Blog: Replicating Directory Changes in Filtered Set access rights for the naming context

 

While /rodcprep would suggest something to do with Read only domain controllers the page doesnt specifically refer to RODCs so may help.

 

And I believe this updates the application partition on the schema and if my memory serves me correctly this is the partition that DNS resides on.

 

Hope this helps,

 

Ash

Edited May 4, 2011 by iMash

[Jobos]

I don't recall as server GC was added to the domain months ago. Is there any logs I can check? As I understand it before you make a server read only you need to have a existing 2008 writeable server?

[iMash]

I have found the proper KB article referring to that error Here.

 

It appears that, that error doesn't apply unless you are actually trying to add a RODC to the domain, which I assume is your case (i.e. your not trying to make the DC read only)?

 

From the KB I understand that Dcdiag will throw this error until /rodcprep is run, but you can "disregard" it (running rodcprep wont actually add a Read Only, it just preps the schema for adding one in future).

 

What specifically are the problems you are having with your network? I cant imagine this error being linked to that unless you are trying to implement a RODC.

 

Ash

Edited May 4, 2011 by iMash

[Jobos]

What specifically are the problems you are having with your network? I cant imagine this error being linked to that unless you are trying to implement a RODC.

 

Ash

Thanks for the link that explains it nicely.

 

I think the problem is sorted now as I rebooted the switches after school and everything seems ok. First thing this morning the HT said his and other people couldn't access their email. I spent some time on the HT's computer trying to get Outlook working and it still didn't work even after deleting the profile saying it couldn't find the Exchange server. It's all back up now but I could do without that first thing in the morning.