DNS access error

[wholder]

Hi everyone

 

I have a slight issue, Im 2 days into a new job and for some reason this morning the DNS has broke on the server !

 

When trying to run the DNS it says the server cannot be contacted, access is denied, add anyway ? This is slightly worrying as DNS is trying to connect to AD on the same machine.

I have no idea why this has happend

 

any help would be much appreciated as it's a slight issue with people not being able to get mapped drives or printers

 

Many Thanks in advance

 

Wayne

[Geoff]

run netdiag and dcdiag and post the output

[psydii]

This happened to me this morning.

 

The solution? Right click the DNS Management icon in the start menu and click run as administrator

 

Hope that works for you too!

[wholder]

thanks for the quick reply

 

dcdiag gave this :

Performing initial setup:

Trying to find home server...

Home Server = SVR-ARH-DC01

* Identified AD Forest.

Done gathering initial info.

 

Doing initial required tests

 

Testing server: ARH\SVR-ARH-DC01

Starting test: Connectivity

The host a3f80d71-d58c-498f-a197-0c73301dd6c8._msdcs.lcc-schools.local

could not be resolved to an IP address. Check the DNS server, DHCP,

server name, etc.

Got error while checking LDAP and RPC connectivity. Please check your

firewall settings.

......................... SVR-ARH-DC01 failed test Connectivity

 

 

and sadly right clicking run as administrator didnt work i wish it had though !

[Geoff]

Is the DNS server running zones that are AD integrated or not?

[wholder]

As far as i know the DNS should be running intergrated zones, the error messgaes in event viewer suggest it does.

They say that it is unable the DNS server is configured to obtain and use information from the directory for this zone and is unable to do load the zone without it.

 

its very odd as i can ping the server and it a client machine knows that the DNS is on the dc01 and the domain :S

 

thanks

[timzim]

What OS? Have you altered the firewall settings recently?

[wholder]

windows server 2008 r2

and no

ive only been here 2 days and it was working fine until about 10 this morning

baptsim of fire i believe !!

[psydii]

Was worth a shot. Got my own problems today so I'll duck out of this one now... good luck - you're in good hands here.

[wholder]

thanks for the advice though

it was much appreciated, hope you can sort your problems too

[cpjitservices]

have you tried reinstalling the role ?

 

and also check the services are running.... even try a reboot!

[wholder]

hello, i havent tried that

"have you tried reinstalling the role ?"

how would i go about doing this ?

 

and the DNS service and AD are deffinitely running. And yes ive rebooted several times, its always worth a try and i live in hope but sadly that didnt sort it

[bondbill2k2]

any recent updates possibly applied overnight worth trying remove any that applied overnight or around that time?

[wholder]

none that i can see im afraid

[Geoff]

What is in the server event log in/around when DNS starts up after a server reboot?

[wholder]

i have a group policy error which says

group policy failed: could not resolve the host name

name resoulution on current dc or

ad replication latency

 

 

loads of AD errors (same error)

Knowledge Consistency Checker (KCC) has destected problems:

 

there is insuffiecient site connectivity information for the KCC to create a spanning treereplication topology or one or more directory servers with the discovery partition are unable to replicate the directory partition information. this is probably due to inaccessible directory servers

 

And DNS errors

saying

DNS was unable to to open Active Directory error code 4000

Edited June 14, 2012 by wholder

[Geoff]

Active Directory-integrated domain name is not displayed in DNS snap-in with Event ID 4000 and 4013 messages

[wholder]

i dont seem to have a local policies on my computer settings as it suggests in the article :s

[wholder]

Thank you everyone for your help

I managed to fix the issue that seemed to be caused by a Invalid secure channel / Password mismatch

incase people have this problem in the future

Netdom to reset password

 

very relieved man !!

[Edwardjr]

Thanks wholder, you've just saved me a lot of time!