Hi,

i noticed that every time that we restart our dns server for the child1
domain (child1.dom.org) that the root domain is gone (dom.org).
Both server are windows 2000 with the latest service pack.
The child domain has a secondary zone for the root domain.

OS -> srv name : role

Windows2k -> srv1. : root dns Primary Zone
Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone from root
dns
Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone from root
dns

There are no events logged that the zone disappears or something like that .
If i recreate the zone all is fine till the next restart.
The problem occurs only on serv2.
On the srv3 (another child donain) it is working properly.

What can cause the zone to disappear?How can i prevent it?

best regards

In news:3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed),
Rex Kremer <(E-Mail Removed)> made this post, which I then commented about
below:
> Hi,
>
> i noticed that every time that we restart our dns server for the
> child1 domain (child1.dom.org) that the root domain is gone (dom.org).
> Both server are windows 2000 with the latest service pack.
> The child domain has a secondary zone for the root domain.
>
> OS -> srv name : role
>
> Windows2k -> srv1. : root dns Primary Zone
> Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
> from root dns
> Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
> from root dns
>
> There are no events logged that the zone disappears or something like
> that . If i recreate the zone all is fine till the next restart.
> The problem occurs only on serv2.
> On the srv3 (another child donain) it is working properly.
>
> What can cause the zone to disappear?How can i prevent it?
>
> best regards

That's because of a conflict. The child zone is a child of the parent zone
you are trying to create, therefore the system will yank it. That won't
work. In your scenario, you must use a delegation to make this work where
you are delegating the child zone from the parent to the DNS servers in the
child domain. Then you configure a Forwarder back from the child to the
parent, then a forwarder on the parent to the ISP's.

255248 - HOW TO Create a Child Domain in Active Directory and Delegate the
DNS Namespace to the Child Domain:
http://support.microsoft.com/?id=255248


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================

Hi,
thats not correct.
I am doing a secondary zone from the root domain in the child domain to
speed up the name resolution.It works fine in every other child domain (we
got 5 child domains!).The error occours only on srv1.
In the case like you said it would happen in every child domain (the
configuration is the same) and that is not happening.

Every child domain got an own primary dns zone and has a secondary zone for
the other domains (for faster name resolution).Forwarders are set.
Forwarders are set to the root domain.

"Ace Fekay [MVP]" wrote:

> In news:3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed),
> Rex Kremer <(E-Mail Removed)> made this post, which I then commented about
> below:
> > Hi,
> >
> > i noticed that every time that we restart our dns server for the
> > child1 domain (child1.dom.org) that the root domain is gone (dom.org).
> > Both server are windows 2000 with the latest service pack.
> > The child domain has a secondary zone for the root domain.
> >
> > OS -> srv name : role
> >
> > Windows2k -> srv1. : root dns Primary Zone
> > Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
> > from root dns
> > Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
> > from root dns
> >
> > There are no events logged that the zone disappears or something like
> > that . If i recreate the zone all is fine till the next restart.
> > The problem occurs only on serv2.
> > On the srv3 (another child donain) it is working properly.
> >
> > What can cause the zone to disappear?How can i prevent it?
> >
> > best regards
>
> That's because of a conflict. The child zone is a child of the parent zone
> you are trying to create, therefore the system will yank it. That won't
> work. In your scenario, you must use a delegation to make this work where
> you are delegating the child zone from the parent to the DNS servers in the
> child domain. Then you configure a Forwarder back from the child to the
> parent, then a forwarder on the parent to the ISP's.
>
> 255248 - HOW TO Create a Child Domain in Active Directory and Delegate the
> DNS Namespace to the Child Domain:
> http://support.microsoft.com/?id=255248
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> If this post is viewed at a non-Microsoft community website, and you were to
> respond to it through that community's website, I may not see your reply
> unless that website posts replies back to the original Microsoft forum.
> Therefore, please direct all replies ONLY to the Microsoft public newsgroup
> this thread originated in so all can benefit or ensure the web community
> posts it back to the original forum.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Windows Server Directory Services
> Microsoft Certified Trainer
> Infinite Diversities in Infinite Combinations.
> =================================
>
>
>

Hi Rex,

Thanks for posting here.

I understand that after rebooting, one of the secondary zones disappears
from the DNS MMC snap-in in a Windows 2000 server.

In this case, I would like to know whether the DNS zone file for the
secondary zone of root domain still exists in the %SystemRoot%\system32\dns
folder when the zone disappears from the MMC?

If so, this may be caused by an AD integrated zone which has the same name
with the secondary zone.

You may open AD Users and Computers MMC, locate System -> MicrosoftDNS, if
you find a Ad zone with the same name (dom.org as you mentioned) as the
secondary zone, please delete the AD zone for a test.

Restart the server to see whether this resolve your issue.

Hope this helps.

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: After server restart Dns zone is disappears
>thread-index: AcXpxpg6DJxhplsURsyXJOtdMoIKfw==
>X-WBNR-Posting-Host: 212.79.172.242
>From: "=?Utf-8?B?UmV4IEtyZW1lcg==?=" <(E-Mail Removed)>
>References: <3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed)>
<(E-Mail Removed)>
>Subject: Re: After server restart Dns zone is disappears
>Date: Tue, 15 Nov 2005 01:26:01 -0800
>Lines: 74
>Message-ID: <0A9A88E8-AF67-4A9F-9B2C-(E-Mail Removed)>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.win2000.dns
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.win2000.dns:51536
>X-Tomcat-NG: microsoft.public.win2000.dns
>
>Hi,
>thats not correct.
>I am doing a secondary zone from the root domain in the child domain to
>speed up the name resolution.It works fine in every other child domain (we
>got 5 child domains!).The error occours only on srv1.
>In the case like you said it would happen in every child domain (the
>configuration is the same) and that is not happening.
>
>Every child domain got an own primary dns zone and has a secondary zone
for
>the other domains (for faster name resolution).Forwarders are set.
>Forwarders are set to the root domain.
>
>"Ace Fekay [MVP]" wrote:
>
>> In news:3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed),
>> Rex Kremer <(E-Mail Removed)> made this post, which I then commented
about
>> below:
>> > Hi,
>> >
>> > i noticed that every time that we restart our dns server for the
>> > child1 domain (child1.dom.org) that the root domain is gone (dom.org).
>> > Both server are windows 2000 with the latest service pack.
>> > The child domain has a secondary zone for the root domain.
>> >
>> > OS -> srv name : role
>> >
>> > Windows2k -> srv1. : root dns Primary Zone
>> > Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
>> > from root dns
>> > Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
>> > from root dns
>> >
>> > There are no events logged that the zone disappears or something like
>> > that . If i recreate the zone all is fine till the next restart.
>> > The problem occurs only on serv2.
>> > On the srv3 (another child donain) it is working properly.
>> >
>> > What can cause the zone to disappear?How can i prevent it?
>> >
>> > best regards
>>
>> That's because of a conflict. The child zone is a child of the parent
zone
>> you are trying to create, therefore the system will yank it. That won't
>> work. In your scenario, you must use a delegation to make this work
where
>> you are delegating the child zone from the parent to the DNS servers in
the
>> child domain. Then you configure a Forwarder back from the child to the
>> parent, then a forwarder on the parent to the ISP's.
>>
>> 255248 - HOW TO Create a Child Domain in Active Directory and Delegate
the
>> DNS Namespace to the Child Domain:
>> http://support.microsoft.com/?id=255248
>>
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> If this post is viewed at a non-Microsoft community website, and you
were to
>> respond to it through that community's website, I may not see your reply
>> unless that website posts replies back to the original Microsoft forum.
>> Therefore, please direct all replies ONLY to the Microsoft public
newsgroup
>> this thread originated in so all can benefit or ensure the web community
>> posts it back to the original forum.
>>
>> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
>> Microsoft MVP - Windows Server Directory Services
>> Microsoft Certified Trainer
>> Infinite Diversities in Infinite Combinations.
>> =================================
>>
>>
>>
>

Hi Tom,

the dns zone file has the creation date of the day when i recreated the dns
zone.
ALL zones and files got different names.
We don`t have any ad integrated dns zones.

regards

"Tom Che [MSFT]" wrote:

> Hi Rex,
>
> Thanks for posting here.
>
> I understand that after rebooting, one of the secondary zones disappears
> from the DNS MMC snap-in in a Windows 2000 server.
>
> In this case, I would like to know whether the DNS zone file for the
> secondary zone of root domain still exists in the %SystemRoot%\system32\dns
> folder when the zone disappears from the MMC?
>
> If so, this may be caused by an AD integrated zone which has the same name
> with the secondary zone.
>
> You may open AD Users and Computers MMC, locate System -> MicrosoftDNS, if
> you find a Ad zone with the same name (dom.org as you mentioned) as the
> secondary zone, please delete the AD zone for a test.
>
> Restart the server to see whether this resolve your issue.
>
> Hope this helps.
>
> Have a nice day!
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >Thread-Topic: After server restart Dns zone is disappears
> >thread-index: AcXpxpg6DJxhplsURsyXJOtdMoIKfw==
> >X-WBNR-Posting-Host: 212.79.172.242
> >From: "=?Utf-8?B?UmV4IEtyZW1lcg==?=" <(E-Mail Removed)>
> >References: <3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed)>
> <(E-Mail Removed)>
> >Subject: Re: After server restart Dns zone is disappears
> >Date: Tue, 15 Nov 2005 01:26:01 -0800
> >Lines: 74
> >Message-ID: <0A9A88E8-AF67-4A9F-9B2C-(E-Mail Removed)>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.win2000.dns
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.win2000.dns:51536
> >X-Tomcat-NG: microsoft.public.win2000.dns
> >
> >Hi,
> >thats not correct.
> >I am doing a secondary zone from the root domain in the child domain to
> >speed up the name resolution.It works fine in every other child domain (we
> >got 5 child domains!).The error occours only on srv1.
> >In the case like you said it would happen in every child domain (the
> >configuration is the same) and that is not happening.
> >
> >Every child domain got an own primary dns zone and has a secondary zone
> for
> >the other domains (for faster name resolution).Forwarders are set.
> >Forwarders are set to the root domain.
> >
> >"Ace Fekay [MVP]" wrote:
> >
> >> In news:3ED2F4C8-AB32-41BC-8A88-(E-Mail Removed),
> >> Rex Kremer <(E-Mail Removed)> made this post, which I then commented
> about
> >> below:
> >> > Hi,
> >> >
> >> > i noticed that every time that we restart our dns server for the
> >> > child1 domain (child1.dom.org) that the root domain is gone (dom.org).
> >> > Both server are windows 2000 with the latest service pack.
> >> > The child domain has a secondary zone for the root domain.
> >> >
> >> > OS -> srv name : role
> >> >
> >> > Windows2k -> srv1. : root dns Primary Zone
> >> > Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
> >> > from root dns
> >> > Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
> >> > from root dns
> >> >
> >> > There are no events logged that the zone disappears or something like
> >> > that . If i recreate the zone all is fine till the next restart.
> >> > The problem occurs only on serv2.
> >> > On the srv3 (another child donain) it is working properly.
> >> >
> >> > What can cause the zone to disappear?How can i prevent it?
> >> >
> >> > best regards
> >>
> >> That's because of a conflict. The child zone is a child of the parent
> zone
> >> you are trying to create, therefore the system will yank it. That won't
> >> work. In your scenario, you must use a delegation to make this work
> where
> >> you are delegating the child zone from the parent to the DNS servers in
> the
> >> child domain. Then you configure a Forwarder back from the child to the
> >> parent, then a forwarder on the parent to the ISP's.
> >>
> >> 255248 - HOW TO Create a Child Domain in Active Directory and Delegate
> the
> >> DNS Namespace to the Child Domain:
> >> http://support.microsoft.com/?id=255248
> >>
> >>
> >> --
> >> Ace
> >>
> >> This posting is provided "AS-IS" with no warranties or guarantees and
> >> confers no rights.
> >>
> >> If this post is viewed at a non-Microsoft community website, and you
> were to
> >> respond to it through that community's website, I may not see your reply
> >> unless that website posts replies back to the original Microsoft forum.
> >> Therefore, please direct all replies ONLY to the Microsoft public
> newsgroup
> >> this thread originated in so all can benefit or ensure the web community
> >> posts it back to the original forum.
> >>
> >> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> >> Microsoft MVP - Windows Server Directory Services
> >> Microsoft Certified Trainer
> >> Infinite Diversities in Infinite Combinations.
> >> =================================
> >>
> >>
> >>
> >
>
>

Rex Kremer <(E-Mail Removed)> wrote:
> Hi,
>
> i noticed that every time that we restart our dns server for the
> child1 domain (child1.dom.org) that the root domain is gone (dom.org).
> Both server are windows 2000 with the latest service pack.
> The child domain has a secondary zone for the root domain.
>
> OS -> srv name : role
>
> Windows2k -> srv1. : root dns Primary Zone
> Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
> from root dns
> Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
> from root dns
>
> There are no events logged that the zone disappears or something like
> that . If i recreate the zone all is fine till the next restart.
> The problem occurs only on serv2.
> On the srv3 (another child donain) it is working properly.
>
> What can cause the zone to disappear?How can i prevent it?

This is really pretty common, a disappearing secondary zone, is the symptoms
of a DC that has the same zone on another DC that is AD integrated. Check
all zones on all DCS.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

In news:0A9A88E8-AF67-4A9F-9B2C-(E-Mail Removed),
Rex Kremer <(E-Mail Removed)> made this post, which I then commented about
below:
> Hi,
> thats not correct.
> I am doing a secondary zone from the root domain in the child domain
> to speed up the name resolution.It works fine in every other child
> domain (we got 5 child domains!).The error occours only on srv1.
> In the case like you said it would happen in every child domain (the
> configuration is the same) and that is not happening.
>
> Every child domain got an own primary dns zone and has a secondary
> zone for the other domains (for faster name resolution).Forwarders
> are set. Forwarders are set to the root domain.
>

Rex, when I replied, I was assuming the zone was AD Integrated, for that is
what I meant by "conflict". As what has been mentioned by Kevin and Tom.
Their replies should help you out.

If not sure, and you don't see the zone(s) in any of your DCs, you can use
the ADSI Edit utiltiy, under the DomainNC partition/System/Microsoft DNS. In
the right pane, you will see the zones in the list, if they are AD
Integrated.

ADSI Edit is available by installing the Support Tools from the Windows
CDROM. Once installed, since this is Windows 2000, you will see ADSI Edit
snap-in available in Start/Programs/WIndows Support Tools.

Ace

Hi,

we don`t have any ad integrated dns zones.
How can i monitor that the zone file does not get deleted.
i could audit the file access but by which group ?
DO you have any other ideas what i could do ?

regards

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Rex Kremer <(E-Mail Removed)> wrote:
> > Hi,
> >
> > i noticed that every time that we restart our dns server for the
> > child1 domain (child1.dom.org) that the root domain is gone (dom.org).
> > Both server are windows 2000 with the latest service pack.
> > The child domain has a secondary zone for the root domain.
> >
> > OS -> srv name : role
> >
> > Windows2k -> srv1. : root dns Primary Zone
> > Windows2k -> srv2. : child1.root.dns Primary Zone ,secondary zone
> > from root dns
> > Windows2k -> srv3. : child2.root.dns Primary Zone ,secondary zone
> > from root dns
> >
> > There are no events logged that the zone disappears or something like
> > that . If i recreate the zone all is fine till the next restart.
> > The problem occurs only on serv2.
> > On the srv3 (another child donain) it is working properly.
> >
> > What can cause the zone to disappear?How can i prevent it?
>
> This is really pretty common, a disappearing secondary zone, is the symptoms
> of a DC that has the same zone on another DC that is AD integrated. Check
> all zones on all DCS.
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>

In news:97CA24F5-047B-4DC0-ABD5-(E-Mail Removed),
Rex Kremer <(E-Mail Removed)> made this post, which I then commented about
below:
> Hi,
>
> we don`t have any ad integrated dns zones.
> How can i monitor that the zone file does not get deleted.
> i could audit the file access but by which group ?
> DO you have any other ideas what i could do ?
>
> regards

Did you use ADSI Edit to confirm that?

Ace

Hi,

sry i thought it was only necessary if we had an ad integrated zone.
Ok i have cheked it with adsi edit and it shows our root dns zone (dom.org).

dc=dom.org
dc=rootdnsservers

Tom said that i should delte this entry`s?
How can i do a backup of them just in case something is not working later.

regards


"Ace Fekay [MVP]" wrote:

> In news:97CA24F5-047B-4DC0-ABD5-(E-Mail Removed),
> Rex Kremer <(E-Mail Removed)> made this post, which I then commented about
> below:
> > Hi,
> >
> > we don`t have any ad integrated dns zones.
> > How can i monitor that the zone file does not get deleted.
> > i could audit the file access but by which group ?
> > DO you have any other ideas what i could do ?
> >
> > regards
>
> Did you use ADSI Edit to confirm that?
>
> Ace
>
>
>