DNS

B

bam Bino

I have 6 computers on my little network and a windows2000 server

Computers keep dropping of the domain, then I have to re-add them.


Don't know if this is related , but I keep getting thse messages:



Registration of the DNS record
'4c43f5d1-cca5-4551-88f8-08127e1f18c9._msdcs.JoeBlow.COM. 600 IN CNAME
server1.JoeBlow.COM.' failed with the following error:
DNS operation refused.



Can I just turn of DNS?
 
M

Marina Roos [SBS-MVP]

DNS -server should be running on your server. Does DNS on your servernic(s)
*only* point to your server-IP? On the internal nic properties, TCP/IP,
Advanced, tab DNS, make sure the ''register in DNS" and "add primary
suffix" are checked.

In DNS-server, properties of Forward and Reverse Lookup Zones, make sure the
'allow dynamic updates' is set to yes.
 
B

bam Bino

DNS -server should be running on your server. Does DNS on your servernic(s)
*only* point to your server-IP?


Yes


On the internal nic properties, TCP/IP,
Advanced, tab DNS, make sure the ''register in DNS" and "add primary
suffix" are checked.

OK, but "add primary suffix" does not exist.
However, "append primary and connection specific DNS suffixes" is checked.

In DNS-server, properties of Forward and Reverse Lookup Zones, make sure the
'allow dynamic updates' is set to yes.

I have no forward or reverse lookup zones at all..


Thanks
 
M

Marina Roos [SBS-MVP]

If you have no lookup zones, there is your problem.
Check the following out:
Active Directory with DNS on the same server.

TCP/IP settings

Internal nic:
1.) Right click "My network places" and select Properties.
2.) For the LAN connection right click and select Properties.
3.) On the properties page double click TCP/IP.
4.) On the internal nic (when using 2 nics) the gateway should be blank. At
the bottom of the protocols page select Preferred DNS Server option and
enter the IP address for the server itself. Leave the alternate DNS server
IP blank.
5.) On the DNS-tab, verify that the only DNS server is the servers internal
IP address. Make sure the "Append parent suffixes of the primary DNS suffix"
and "Register this connection's address in DNS" selection are checked.
6.) On the WINS-tab, verify that the WINS address is the servers internal IP
address. Verify that "Enable LMHOSTS lookup" is checked and that "Enable
NetBIOS over TCP/IP" is selected.

External nic:
1.) Right click "My network places" and select Properties.
2.) For the WAN connection right click and select Properties.
3.) On the properties page double click TCP/IP.
4.) The IP should be in a different range from the internal nic. At the
bottom of the protocols page select Preferred DNS Server option and enter
the IP address for the server itself. Leave the alternate DNS server IP
blank.
5.) On the DNS-tab, verify that the only DNS server is the servers internal
IP address. Make sure the "Append parent suffixes of the primary DNS suffix"
and "Register this connection's address in DNS" selection are unchecked.
6.) On the WINS-tab, verify that there are no WINS addresses listed. Verify
that "Enable LMHOSTS lookup" is checked and that "Disable NetBIOS over
TCP/IP" is selected. This will have the effect of allowing only the internal
nic to register with WINS. NetBIOS packets are blocked by internet routers,
so no NetBIOS over TCP/IP should be permitted on the external nic.


DNS settings

1.) Open up the DNS console.
2.) Once opened, right click on the server in the right hand pane and select
Properties.
3.) On the Interfaces tab, set the server to listen only on its internal IP
Address.
4.) On the "Forwarders" tab, check the "Enable forwarders" selection at the
top.
5.) Add the ISP-DNS-numbers and click Apply. (note- In the TCP/IP settings,
we selected the choice for DNS to point to itself. If name resolution
cannot be resolved then a request is made to the forwarders. If resolution
cannot be made via the internal DNS and there are no forwarders listed, then
resolution will be made via the root hints.)
6.) On the Monitoring tab, select simple and recursive test types and click
the Test now button. Both types should pass. Uncheck test types, click
Apply, then click OK.
7.) Expand the containers beneath the servers name and click on the Reverse
lookup zone subnet. It should correspond to the network ID of the LAN with
an "x" in the last octet. If one is not present, create a Reverse lookup
zone, type Active Directory Integrated.
8.) Verify that the server has a pointer record listed for its own IP.
9.) Bring up the properties of the Reverse Lookup Zone subnet.
10.) Click on the Name Servers tab. Verify that the nameserver is the
servers FQDN with only the internal IP address listed.
11.) Click on the WINS-R tab. Enable WINS reverse lookup and enter the
domainname.
12.) Click on the General tab and set "Allow dynamic updates?" to yes.
13.) Click Apply, clik OK.
14.) Click on the "Forward Lookup Zone" beneath the container Forward Lookup
Zones.
15.) Delete any record which is not on the local internal subnet. If there
is a folder with a dot "." listed then delete it. (note- This indicates to
the server that it is the root server, which means do not go beyond this
server for name resolution.)
16.) Bring up the properties of the Forward Lookup Zone.
17.) Click on the Name Servers tab. Verify that the nameserver is the
servers FQDN with only the internal IP address listed.
18.) Click on the WINS-R tab. Enable WINS forward lookup and enter the
servers internal IP address and click the Add button.
19.) Click on the General tab and set "Allow dynamic updates?" to yes.
20.) Click Apply, clik OK.
21.) Restart DNS-server.

Open up a command prompt and type the following:

1.) At the prompt type "ipconfig /flushdns" and wait for the services to
flush.
2.) "ipconfig /registerdns" and wait for the services to register.
3.) net stop netlogon
4.) net start netlogon

Once all of this is done, open the DNS console again. Expand the Forward
lookup zones, then expand the domain folder. You should see the underscore
folders below:

_msdcs
_sites
_tcp
_udp
 
B

bam Bino

Oh, I don't have 2 nic cards on the same machine.

In other words, I don't have a internal nic and external nic

I have just one nic.
It goes to the linksys router (which goes to the dSL modem and out tot he
internet), just like all the computers on the network.

(actually i do have a second nic, but it is just disabled)
 
M

Marina Roos [SBS-MVP]

Enable that second nic and attach your router to it. It will make things
easier. Remember though, that if you are using RRAS as well, you will have
to do the regedits in 292822.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Netlogon error in event logger 1
DNS Problem 5
Domain fails to register 3
netlogon, eventID 5774 3
DNS/ ISA and NIC configuration 2
the Event Viewer error 1
DNS problem 3
Help with Error Message 1

Top