DNS freezes server

[Mitja]

Hi!

I have only one w2k witch is DC, AD, EXCH 2000 and DNS.

When I start DNS MMC, server freezes and only hard reset
helps. In Event viewer i can see this:
The DNS server was unable to open zone zzv-lj.si in the
Active Directory. This DNS Server is configured to obtain
and use information from the directory for this zone and
is unable to load the zone without it. Check that the
Active Directory is functioning properly and reload the
zone. The event data is the error code (4001)

Any idea how to repair this?

Thank you for help,

Mitja

 

[Michael Snyder [MSFT]]

Hi Mitja,
Can you use runas from another machine (preferably XP with W2k3 adminpak) to
target this server and try the operation again?

Another option would be to use dnscmd to see if it can enumerate the zone,
possibly convert it to a file-backed zone temporarily, and fix the
corruption.

Do you have any other problems with AD, or event viewer events indicating
problems with AD?

Thanks

 

[Guest]

Thaks for help!

I can reach DNS MMC form another w2k server and it works
fine and all properties are OK.
On critical server, I can use nslookup and see that DNS
works OK.
"dnscmd" does not work.
But when I tried to set up sec. DC on other member server
server, the operation was refused because:
"The wizard cannot gain access to the list of domains in
the forest. The specified domain eather does not exist or
could not be contacted."

AD logs are all Ok and AD works fine.

But System log is strange: Source NetLogon, Description:
Registration of the DNS record _kerberos._udp... 600 IN
SRV ... failed with the following error: DN operation
refused.
it it around 10 similar logs, refusing domain,
_ldap._tcp.domain, defauli-first-site-name...


Mitja

 

[Michael Snyder [MSFT]]

Does DCdiag give clean results on your domain controllers? Perhaps the DCs
are in an unhealthy state and that is causing problems with DNS.

 

[Michael Johnston [MSFT]]

Make sure that this server only points to itself for DNS. If not, this may explain the AD errors you are getting.

Thank you,
Mike Johnston
Microsoft Network Support

--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they originated.