7063

[Michael S. Androsov]

Some in the Event Log on my Windows Server 2000 (SP4)
computer I received next message:
Source: DNS
ID: 7063
The DNS-server is adjusted on transfer to not recursive
DNS-server on "...".
DNS-servers in the list of transfer to be OBLIGED are
adjusted on processing of recursive inquiries.

But my server in this list is recursive.

What's a problem?

Michael S. Androsov
EXPOCENTR

 

[Kevin D. Goodknecht [MVP]]

In What is the IP address the error notes?
Can you also post the ipconfig /all unedited?

 

[Michael S. Androsov]

Address of my server: 10.1.0.2. Address of the forward
server - 10.1.0.8. In the error message notes 10.1.0.8 IP
address. Next is ipconfig command output:

Host name .... . . . . . . . . . : expo05
Main DNS suffix .... . . . . . . : expocentr.ru
Host type . . . . . . . . . . . . : Mixed
Enable IP routing . . . . . . . . : No
Trusted WINS server . . . . . . . : No
Order of browsing DNS suffix . . : expocentr.ru

Ethernet adapter Connect to local network 3:

DNS suffix of this connection . . : expocentr.ru
Description . . . . . . . . . . . : 3Com 3C996B
Gigabit Server NIC
Phusical address. . . . . . . . . : 00-04-76-EF-0C-
0E
DHCP enabled . . . . . . . . . . : No
IP address. . . . . . . . . . . . : 10.1.0.2
Subnet mask . . . . . . . . . . : 255.255.0.0
Default gateway . . . . . . . . . : 10.1.0.1
DNS servers . . . . . . . . . . . : 10.1.0.2
10.1.0.3

I have Russian version of the Windows Server 2000. Sorry,
if I not correct messages translated.

Michael S. Androsov
EXPOCENTR

 

[Kevin D. Goodknecht [MVP]]

In

Address of my server: 10.1.0.2. Address of the forward
server - 10.1.0.8. In the error message notes 10.1.0.8 IP
address. Next is ipconfig command output:

Your ipconfig looks OK, assming the main suffix matches your AD domain name.
Can you try a different forwarder?

 

[Michael S. Androsov]

-----Original Message-----
In Michael S. Androsov <[email protected]> posted a question
Then Kevin replied below:

Your ipconfig looks OK, assming the main suffix matches your AD domain name.
Can you try a different forwarder?








.

May be I don't say.
My forward server working OK. But sometimes I received
this message in the Event Log.

Michael S. Androsov
EXPOCENTR

 

[Kevin D. Goodknecht [MVP]]

In If 10.1.0.3 is not a DC you should probably not use it in TCP/IP properties
on the DC.
The DC and all members should only use the DC for DNS, or a DNS server that
has a secondary copy of the DC's AD zone.

May be I don't say.
My forward server working OK. But sometimes I received
this message in the Event Log.

What do you mean forward server?10.1.0.8 is the server that 10.1.0.2 is forwarding to?
What is 10.1.0.8?

I am really trying to get a picrture of you setup in my mind but it is very
difficult.
It is OK the Forward to 10.1.0.8 if you have not disabled recursion on the
Advanced tab and if its forwarder also supports recursion.
Is there a forwarder in 10.1.0.8?
Take a look at this KB starting at Step 3, it tells you how to enable
Internet DNS in win2k.
300202 - HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?id=300202&FR=1

 

[Michael S. Androsov]

-----Original Message-----
In Michael S. Androsov <[email protected]> posted a question
Then Kevin replied below:
If 10.1.0.3 is not a DC you should probably not use it in TCP/IP properties
on the DC.
The DC and all members should only use the DC for DNS, or a DNS server that
has a secondary copy of the DC's AD zone.


What do you mean forward server?10.1.0.8 is the server that 10.1.0.2 is forwarding to?
What is 10.1.0.8?

I am really trying to get a picrture of you setup in my mind but it is very
difficult.
It is OK the Forward to 10.1.0.8 if you have not disabled recursion on the
Advanced tab and if its forwarder also supports recursion.
Is there a forwarder in 10.1.0.8?
Take a look at this KB starting at Step 3, it tells you how to enable
Internet DNS in win2k.
300202 - HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?id=300202&FR=1






.

My scheme od DNS servers:

10.1.0.2 (primary)(DC) --- forward ---> 10.1.0.8 (not
DC) recursive
10.1.0.3 (secondary) (not DC) --- forward ---> 10.1.0.8

This scheme is working. But sometimes I received above
message in the Event Log. I have't problems with my DNS
servers. Why this message?

Michael S. Androsov
EXPOCENTR

 

[Kevin D. Goodknecht [MVP]]

In

My scheme od DNS servers:

10.1.0.2 (primary)(DC) --- forward ---> 10.1.0.8 (not
DC) recursive
10.1.0.3 (secondary) (not DC) --- forward ---> 10.1.0.8

This scheme is working. But sometimes I received above
message in the Event Log. I have't problems with my DNS
servers. Why this message?

Michael S. Androsov
EXPOCENTR

The reason you recieve the message is because you have two DCs, but only one
holds a writable DNS zone for the AD domain. Your other DNS server is a
Secondary and is therefore not writable. So when the DC with DNS starts, it
sees a DNS server for which it is the primary nameserver for and when it
tries to register it cannot because it has an Active Directory Integrated
zone and AD has not started.
If you are going to run Primary / Secondary DNS you should make the zone on
the DC Standard Primary instead of AD Integrated, that way the zone is
loaded when DNS starts.
Otherwise, in your situation, with two DCs and using AD integrated zone on
one DC, do not use a Secondary zone on a member, use AD Integrated on both
DCs the make the other DC the Preferred DNS on each DC. This way when either
DC starts it sees the Other DC for DNS and has a writable zone to register
in. I hope my explanation is clear.