DNS on a local domain

[Robert Bartholomew Jr.]

"So any idea on how to change this?

 

[Ace Fekay [MVP]]

In

"So any idea on how to change this?

If you can;t get into the dialup properties to change it, you can try the
reg to force it.

I would also suggest, since this a DC, that a DC is really recommended not
to have these sort of services on it and put it on a member server. With
DCs, there are many variables that can cause domain miscommunication, this
being one of them, without added administrative overhead, as you;re
experiencing.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Robert Bartholomew Jr.]

The settings that need to change are not the dialup, they are correct. Its
the internal interface that the rras creates when you configure for NAT.


"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

The settings that need to change are not the dialup, they are
correct. Its the internal interface that the rras creates when you
configure for NAT.

I don't believe that internal interface is configurable, nor does it show up
in an ipconfig /all. It does show up in RRAS under Interfaces. If I remember
correctly, that interface is the "connection Medium" for inbound RRAS
connections, whether VPNs are enabled or not (such as in your case since you
only enabled NAT).

Here's read more:

RRAS Console Displays an "Internal" Routing Interface
http://support.microsoft.com/?id=241398

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Ace Fekay [MVP]]

In

The settings that need to change are not the dialup, they are
correct. Its the internal interface that the rras creates when you
configure for NAT.

In addition to my latest response, I'm not trying to say that you "SHOUDN'T"
do this, but that it's very highly recommended. It'll make life a little
easier.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Robert Bartholomew Jr.]

If this dialin interface is not part of the internal then what is it? I am
not sure where to go to change it.

I am compleatly frustraded with this. I dont know where to go next. I know
that this whole thing worked before I removed the root "." zone. The only
thing that was not working correctly was NAT since it needed forwarders.

"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

If this dialin interface is not part of the internal then what is it?
I am not sure where to go to change it.

I am compleatly frustraded with this. I dont know where to go next.
I know that this whole thing worked before I removed the root "."
zone. The only thing that was not working correctly was NAT since
it needed forwarders.

Removing the Root zone has nothing to do with it.

DId you create a dialup interface in Network and Dialup Connections?
Or did you create it as a Demand Dial interface in RRAS (which would use the
one in Network and Dialup Connections).

Have you gone in there and checked?


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Robert Bartholomew Jr.]

Demand Dial. This is created via a wizard in RRAS but does not endup in
Network and Dialup Connections. I will see if I can adjust it in RRAS.

"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

Demand Dial. This is created via a wizard in RRAS but does not endup
in Network and Dialup Connections. I will see if I can adjust it in
RRAS.

Good, sounds like we're on to something. Let us know.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[Robert Bartholomew Jr.]

Well after doing all this it still did not work. I removed the regedits I
did and deleted the zone and reinstalled DNS and started over by creating a
zone 94rescue.local I then reentered the forwarders. NAT workes fine. I
am not getting group polices so I tried to ping 94rescue.local and I do not
get a responce. I can ping the server by name but not the domain.
I dont know what to do now;.

 

[Kevin D. Goodknecht [MVP]]

In

Well after doing all this it still did not work. I removed the
regedits I did and deleted the zone and reinstalled DNS and started
over by creating a zone 94rescue.local I then reentered the
forwarders. NAT workes fine. I am not getting group polices so I
tried to ping 94rescue.local and I do not get a responce. I can ping
the server by name but not the domain.
I dont know what to do now;.

Do you have a (same as parent folder) record with the IP of your private NIC
in your forward lookup zone?

 

[Robert Bartholomew Jr.]

Yep. SInce I deleted the zone and reinstalled DNS I seem to have lost the
other folders that were ther befor but there are 2 blanks and one for each
computer on the network including the servers name.

 

[Kevin D. Goodknecht [MVP]]

In

Yep. SInce I deleted the zone and reinstalled DNS I seem to have
lost the other folders that were ther befor but there are 2 blanks
and one for each computer on the network including the servers name.

If you re-installed the AD DNS zone did you restart the Netlogon service and
run ipconfig /registerdns?

 

[Robert Bartholomew Jr.]

I reinstalled and restarted the server. I looked at the blanks and there
were 2 one for the namserver and one for the admin. I created a new blank
with the server IP. I can now ping the domain by name.

 

[Robert Bartholomew Jr.]

Well I dont know what to do now. I am getting the errors that the DNS is
sending packets to itself. I dont know where to look to resolve this. I am
getting errors that there is no DNS server. I can ping the domain I can
ping the server by name I can route the network and shares. I can not
browse with my network places on clients. I am not getting group polices.
And I am not getting changes in user account access rights with groups. If
I add a user to a new group the settings are not being sent to the clients.

I am compleatly lost now.

 

[Ace Fekay [MVP]]

In

Well I dont know what to do now. I am getting the errors that the
DNS is sending packets to itself. I dont know where to look to
resolve this. I am getting errors that there is no DNS server. I
can ping the domain I can ping the server by name I can route the
network and shares. I can not browse with my network places on
clients. I am not getting group polices. And I am not getting
changes in user account access rights with groups. If I add a user
to a new group the settings are not being sent to the clients.

I am compleatly lost now.

Robert, it sounds like you have mutliple issues going on here. Can you post
an updated ipconfig /all please to see how far you have gotten with this?

Did you remove RRAS off this machine yet? I remember we were discussing that
with those registration issues you were having.

If GPOs are not applying, that can mean a couple things:
1. Client machines are NOT using only this internal DNS server.
2. SRV records are missing under the zone in DNS (that's where all the info
is stored about the domain).
3. Incorrect GC and other records (possibly due to RRAS registration we were
discussing earler).

If possible, do you know of a qualified consultant that can come in and help
you out? Hate to see you have all these problems. Maybe if some time, one of
us can remote in for you.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory