Proper DNS configuration help

External Since: Aug 01, 2008 Posts: 8

Both of my dns servers are running on Windows 2000 server SP4. The files
referenced in this KB on both servers are SP4 versions later than this
hotfix. Any other suggestions? The forward lookup zone on both servers is
set for nonsecure and secure dynamic updates.

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66a58018cac49147b69473@msnews.microsoft.com...
> Hello Mike,
>
> See here:
> http://support.microsoft.com/kb/267845
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I just noticed this error in the system log on victory2 which occurs
>> with every system boot. There is no error of this type on victory1.
>> What action should be taken?
>>
>> Event Type: Warning
>> Event Source: NETLOGON
>> Event Category: None
>> Event ID: 5773
>> Date: 08/04/2008
>> Time: 7:50:26 AM
>> User: N/A
>> Computer: VICTORY2
>> Description:
>> The DNS server for this DC does not support dynamic DNS. Add the DNS
>> records
>> from the file '%SystemRoot%\System32\Config\netlogon.dns' to the DNS
>> server
>> serving the domain referenced in that file.
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 2c 23 00 00 ,#..
>> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
>> news:ff16fb66a54d68cac22e3451ac81@msnews.microsoft.com...
>>
>>> Hello Mike,
>>>
>>> I would do exactly the same, remove the 192.x.x.x from the forwarders
>>> and add the other ones.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> I have been looking at the dns setup of a network I inherited and it
>>>> looks wrong to me. Before I change anything I want to verify I am on
>>>> the right track.
>>>>
>>>> All of my clients are configured for
>>>> primary dns=192.168.1.17=victory1
>>>> secondary dns=192.168.1.16=victory2
>>>> Because of this setup I always considered that victory1 was the
>>>> first
>>>> DC configured and victory2 came next but now I am not sure. If the
>>>> AD
>>>> roles are important let me know and I will verify them.
>>>> The primary server is hardly ever down but I have noticed when it is
>>>> dns name resolution slows down because web pages take longer to
>>>> load. This got me investigating the configs and this is what I
>>>> found.
>>>>
>>>> victory1
>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>> transfers
>>>> not
>>>> allowed)
>>>> victory2
>>>> forwarders=192.168.1.17
>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>> transfers
>>>> allowed to any server)
>>>> This would explain when victory1 is down dns takes longer because
>>>> victory2 has to go to root hints for dns. I propose to change to
>>>> this
>>>> config.
>>>> victory1
>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>> transfers
>>>> allowed to any server)
>>>> victory2
>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>> transfers
>>>> allowed to any server)
>>>> If I am missing something or you need more info to sort this out
>>>> just
>>>> let me know. Any help is appreciated.
>
>

External Since: Aug 27, 2007 Posts: 720

Hello Mike,

Please post an unedited ipconfig /all from both servers here.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Both of my dns servers are running on Windows 2000 server SP4. The
> files referenced in this KB on both servers are SP4 versions later
> than this hotfix. Any other suggestions? The forward lookup zone on
> both servers is set for nonsecure and secure dynamic updates.
>
> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb66a58018cac49147b69473@msnews.microsoft.com...
>
>> Hello Mike,
>>
>> See here:
>> http://support.microsoft.com/kb/267845
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I just noticed this error in the system log on victory2 which occurs
>>> with every system boot. There is no error of this type on victory1.
>>> What action should be taken?
>>>
>>> Event Type: Warning
>>> Event Source: NETLOGON
>>> Event Category: None
>>> Event ID: 5773
>>> Date: 08/04/2008
>>> Time: 7:50:26 AM
>>> User: N/A
>>> Computer: VICTORY2
>>> Description:
>>> The DNS server for this DC does not support dynamic DNS. Add the DNS
>>> records
>>> from the file '%SystemRoot%\System32\Config\netlogon.dns' to the DNS
>>> server
>>> serving the domain referenced in that file.
>>> For more information, see Help and Support Center at
>>> http://go.microsoft.com/fwlink/events.asp.
>>> Data:
>>> 0000: 2c 23 00 00 ,#..
>>> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
>>> news:ff16fb66a54d68cac22e3451ac81@msnews.microsoft.com...
>>>> Hello Mike,
>>>>
>>>> I would do exactly the same, remove the 192.x.x.x from the
>>>> forwarders and add the other ones.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I have been looking at the dns setup of a network I inherited and
>>>>> it looks wrong to me. Before I change anything I want to verify I
>>>>> am on the right track.
>>>>>
>>>>> All of my clients are configured for
>>>>> primary dns=192.168.1.17=victory1
>>>>> secondary dns=192.168.1.16=victory2
>>>>> Because of this setup I always considered that victory1 was the
>>>>> first
>>>>> DC configured and victory2 came next but now I am not sure. If the
>>>>> AD
>>>>> roles are important let me know and I will verify them.
>>>>> The primary server is hardly ever down but I have noticed when it
>>>>> is
>>>>> dns name resolution slows down because web pages take longer to
>>>>> load. This got me investigating the configs and this is what I
>>>>> found.
>>>>> victory1
>>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>>> transfers
>>>>> not
>>>>> allowed)
>>>>> victory2
>>>>> forwarders=192.168.1.17
>>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>>> transfers
>>>>> allowed to any server)
>>>>> This would explain when victory1 is down dns takes longer because
>>>>> victory2 has to go to root hints for dns. I propose to change to
>>>>> this
>>>>> config.
>>>>> victory1
>>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>>> transfers
>>>>> allowed to any server)
>>>>> victory2
>>>>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>>>>> forward lookup zone=victory.org(AD integrated, primary, zone
>>>>> transfers
>>>>> allowed to any server)
>>>>> If I am missing something or you need more info to sort this out
>>>>> just
>>>>> let me know. Any help is appreciated.