DNS Event Viewer errors.

J

Jordan Samulaitis

I have created the following ACTIVE DIRECTORY DOMAIN and installed DNS, to
protect the name lets call it mydomain.com.

When I go into Event Viewer under System I see the error LsaSrv, The
Security System could not establish a secured connection with server
DNS/prisoner.iana.org. No authentication protocol was available.

Is this because the domain name is registered by another person? or I have a
DNS setting misconfigured?

Regards,
Jordan
 
K

Kevin D. Goodknecht Sr. [MVP]

In
Jordan Samulaitis said:
I have created the following ACTIVE DIRECTORY DOMAIN and
installed DNS, to protect the name lets call it
mydomain.com.

When I go into Event Viewer under System I see the error
LsaSrv, The Security System could not establish a secured
connection with server DNS/prisoner.iana.org. No
authentication protocol was available.

Is this because the domain name is registered by another
person? or I have a DNS setting misconfigured?

This particular error is because your machine is trying to register a PTR
record for its private IP in the blackhole DNS server (prisoner.iana.org),
where all unknown reverse IP lookups go.
If you want this error to go away, use both of the following.
1 Do not use your ISP's DNS in TCP/IP properties in any position, use only
the local DNS.
2 Create a reverse lookup zone on your local DNS server for your private IP
range.
 
J

Jordan Samulaitis

I have created a reverse lookup zone on my local DNS server. Can I set the
primary DNS server in TCP/IP properties to just my local DNS ie.
192.168.1.2? and leave secondary DNS blank?

Regards,
Jordan
 
K

Kevin D. Goodknecht Sr. [MVP]

In
Jordan Samulaitis said:
I have created a reverse lookup zone on my local DNS
server. Can I set the primary DNS server in TCP/IP
properties to just my local DNS ie. 192.168.1.2? and
leave secondary DNS blank?

Yes, if this is your only AD DNS server you can leave the alternate blank.
 
J

Jordan Samulaitis

Thanks alot for the help Kevin, much appreciated. Looks like that activity
has stopped.



Regards,
Jordan
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top