DNS Errors after DCPROMO

S

Sean G

Hi all,

I'm looking for assistance with regards to errors I'm
getting after recently promoting a machine to the role of
DC in our Domain. I should clarify this further. The
machine was originally demoted from the domain in order to
replace it with another machine. All roles it was
performing was transferred prior to demoting it and
removing it from the domain. The new machine was added to
the domain with the same name and promoted to the role of
a DC and DNS server. First notice replication wasn't
working correctly. The following messages started
appearing in the File Replication Service Event log.

The File Replication Service is having trouble enabling
replication from CSE02 to CSE01 for c:\winnt\sysvol\domain
using the DNS name CSE02.cse. FRS will keep retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name CSE02.cse
from this computer.
[2] FRS is not running on CSE02.cse.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

Further investigations with the netdiag /test:DNS util
returned the following errors. As far as I can see DNS is
setup correctly although the various DC record for this
server, CSE01 is missing in DNS. I've tried netdiag /fix,
but it fails to repair DNS. I should also point out that
the netlogon.dns file on this machine appears to be
correct. Please note this machine is Win2K Server with SP4.

Any help would be appreciated.

DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative
DNS server for the name
'cse01.cse.'. [RCODE_SERVER_FAILURE]
The name 'cse01.cse.' may not be registered in
DNS.
[FATAL] Failed to fix: DC DNS entry cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.cse. re-
registeration on DNSserver '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.acda2a9a-27f2-4a3d-bd09-
bf98199897af.domains._msdcs.cse. re-registeration on DNS
server '###.###.###.##' fail
ed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry 129a5ca2-843b-40c4-
9167-b525fcae94b2._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.dc._msdcs.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.cse. re-registeration onDNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._udp.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._udp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Fix Failed: netdiag failed to re-register
missing DNS entries for this DC on DNS
server '###.###.###.##'.
[FATAL] No DNS servers have the DNS records for this
DC registered.
 
K

Kevin D. Goodknecht [MVP]

In
Sean G said:
Hi all,

I'm looking for assistance with regards to errors I'm
getting after recently promoting a machine to the role of
DC in our Domain. I should clarify this further. The
machine was originally demoted from the domain in order to
replace it with another machine. All roles it was
performing was transferred prior to demoting it and
removing it from the domain. The new machine was added to
the domain with the same name and promoted to the role of
a DC and DNS server. First notice replication wasn't
working correctly. The following messages started
appearing in the File Replication Service Event log.

The File Replication Service is having trouble enabling
replication from CSE02 to CSE01 for c:\winnt\sysvol\domain
using the DNS name CSE02.cse. FRS will keep retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name CSE02.cse
from this computer.
[2] FRS is not running on CSE02.cse.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

Further investigations with the netdiag /test:DNS util
returned the following errors. As far as I can see DNS is
setup correctly although the various DC record for this
server, CSE01 is missing in DNS. I've tried netdiag /fix,
but it fails to repair DNS. I should also point out that
the netlogon.dns file on this machine appears to be
correct. Please note this machine is Win2K Server with SP4.

Any help would be appreciated.

DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative
DNS server for the name
'cse01.cse.'. [RCODE_SERVER_FAILURE]
The name 'cse01.cse.' may not be registered in
DNS.
[FATAL] Failed to fix: DC DNS entry cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.cse. re-
registeration on DNSserver '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.acda2a9a-27f2-4a3d-bd09-
bf98199897af.domains._msdcs.cse. re-registeration on DNS
server '###.###.###.##' fail
ed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry 129a5ca2-843b-40c4-
9167-b525fcae94b2._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.dc._msdcs.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.cse. re-registeration onDNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._udp.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._udp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Fix Failed: netdiag failed to re-register
missing DNS entries for this DC on DNS
server '###.###.###.##'.
[FATAL] No DNS servers have the DNS records for this
DC registered.
This is probably caused by the single label domain name, especially if it
has SP4 installed.
Add the registry entries from this article on all Win2k SP4, XP Pro, and
Win2k3 machines.
300684 - Information About Configuring Windows 2000 for Domains with
Single-Label DNS Names
http://support.microsoft.com/default.aspx?scid=kb;en-us;300684&FR=1
 
S

Sean G

Thanks Kevin,

I will look into that. I assume Means we will have to make
the Reg change to all DC's and members prior to upgrading
them to SP4.

Cheers
-----Original Message-----
In Sean G <[email protected]> posted a question
Then Kevin replied below:
Hi all,

I'm looking for assistance with regards to errors I'm
getting after recently promoting a machine to the role of
DC in our Domain. I should clarify this further. The
machine was originally demoted from the domain in order to
replace it with another machine. All roles it was
performing was transferred prior to demoting it and
removing it from the domain. The new machine was added to
the domain with the same name and promoted to the role of
a DC and DNS server. First notice replication wasn't
working correctly. The following messages started
appearing in the File Replication Service Event log.

The File Replication Service is having trouble enabling
replication from CSE02 to CSE01 for c:\winnt\sysvol\domain
using the DNS name CSE02.cse. FRS will keep retrying.
Following are some of the reasons you would see this
warning.

[1] FRS can not correctly resolve the DNS name CSE02.cse
from this computer.
[2] FRS is not running on CSE02.cse.
[3] The topology information in the Active Directory for
this replica has not yet replicated to all the Domain
Controllers.

Further investigations with the netdiag /test:DNS util
returned the following errors. As far as I can see DNS is
setup correctly although the various DC record for this
server, CSE01 is missing in DNS. I've tried netdiag /fix,
but it fails to repair DNS. I should also point out that
the netlogon.dns file on this machine appears to be
correct. Please note this machine is Win2K Server with SP4.

Any help would be appreciated.

DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative
DNS server for the name
'cse01.cse.'. [RCODE_SERVER_FAILURE]
The name 'cse01.cse.' may not be registered in
DNS.
[FATAL] Failed to fix: DC DNS entry cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.cse. re-
registeration on DNSserver '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.acda2a9a-27f2-4a3d-bd09-
bf98199897af.domains._msdcs.cse. re-registeration on DNS
server '###.###.###.##' fail
ed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry 129a5ca2-843b- 40c4-
9167-b525fcae94b2._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.dc._msdcs.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.ShellHouse._sites.dc._msdcs.cse. re-
registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_ldap._tcp.Nauru._sites.dc._msdcs.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.cse. re-registeration onDNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.ShellHouse._sites.cse. re-registeration on
DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._tcp.Nauru._sites.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry
_kerberos._udp.cse. re-registeration on DNS
server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._udp.cse.
re-registeration on DNS server '###.###.###.##' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Fix Failed: netdiag failed to re-register
missing DNS entries for this DC on DNS
server '###.###.###.##'.
[FATAL] No DNS servers have the DNS records for this
DC registered.
This is probably caused by the single label domain name, especially if it
has SP4 installed.
Add the registry entries from this article on all Win2k SP4, XP Pro, and
Win2k3 machines.
300684 - Information About Configuring Windows 2000 for Domains with
Single-Label DNS Names
http://support.microsoft.com/default.aspx?scid=kb;en- us;300684&FR=1





.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top