Ok - here is what's going on:
1) Single Forest & Domain (KCG.local), running on single W2k3 (SP2) - NOT RUNNING ON R2
2) LAN connects to WAN / Internet via Broadband Cablemodem.
3) No other DC or DNS Services. WINS provided by other Server.
I am missing something here, or I am utterly clueless as to AD & DNS Integration.
AD & DNS box: LOGOS.kcg.local
Question: Shouldn't LOGOS be listed in the AD Computers list? It is in DNS (192.168.2.100)
Moving on...
I am regularly receiving this error in EventViewer:
Computer: LOGOS
Description:
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'ForestDnsZones.KCG.LOCAL.' failed. These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
Possible causes of failure include:
- TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers
- Specified preferred and alternate DNS servers are not running
- DNS server(s) primary for the records to be registered is not running
- Preferred or alternate DNS servers are configured with wrong root hints
- Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration
USER ACTION
Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt or by restarting Net Logon service. Nltest.exe is available in the Microsoft Windows Server Resource Kit CD.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
"nltest.exe /dsregdns" passes every time with 0x0 NERR_Success
Now, for the DNS settings for this system, I am using the following:
208.67.222.222 (OpenDNS)
208.67.220.220 (OpenDNS)
192.168.2.1 (Cablemodem Gateway)
Here are dumps from netdiag (no /fix):
Computer Name: LOGOS
DNS Host Name: LOGOS.KCG.LOCAL
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
List of installed hotfixes :
KB2079403
KB2115168
KB2121546
KB2141007
KB2158563
KB2160329
KB2183461-IE8
KB2207559
KB2229593
KB2259922
KB2279986
KB2286198
KB2296011
KB2296199
KB2345886
KB2347290
KB2360131-IE8
KB2360937
KB2378111
KB2387149
KB2393802
KB2412687
KB2416400-IE8
KB2416451
KB2419635
KB2423089
KB2436673
KB2440591
KB2443105
KB2443685
KB2467659
KB2476490
KB2476687
KB2478953
KB2478960
KB2478971
KB2479628
KB2482017-IE8
KB2483185
KB2485376
KB2485663
KB2497640-IE8
KB2503658
KB2503665
KB2506212
KB2506223
KB2507618
KB2507938
KB2508272
KB2508429
KB2509553
KB2510531-IE8
KB2511455
KB2524375
KB2530548-IE8
KB2535512
KB2536276
KB2536276-v2
KB2544521-IE8
KB2544893
KB2544893-v2
KB2555917
KB2559049-IE8
KB2562485
KB2562937
KB2564958
KB2566454
KB2567053
KB2567680
KB2570222
KB2570791
KB2570947
KB2572069
KB2584146
KB2585542
KB2586448-IE8
KB2592799
KB2598479
KB2601626
KB2603381
KB2607712
KB2616676-v2
KB2618444-IE8
KB2618451
KB2620712
KB2621146
KB2624667
KB2631813
KB2633171
KB2633952-v2
KB2638806
KB2639417
KB2641690-v2
KB2644615
KB2645640
KB2646524
KB2647516-IE8
KB2656358
KB2660465
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933854
KB936357
KB941569
KB942831
KB943055
KB943460
KB944653
KB945553
KB946026
KB948496
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB953298
KB954155
KB954550-v5
KB955069
KB955759
KB956572
KB956802
KB956803
KB956844
KB957097
KB958469
KB958644
KB958687
KB958869
KB959426
KB960225
KB960803
KB960859
KB961063
KB961118
KB961371-v2
KB961501
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969883
KB969947
KB970238
KB970430
KB970653-v3
KB971029
KB971032
KB971468
KB971486
KB971557
KB971633
KB971657
KB971737
KB971961-IE8
KB972270
KB973037
KB973354
KB973507
KB973525
KB973540
KB973687
KB973815
KB973869
KB973904
KB974112
KB974318
KB974392
KB974455-IE8
KB974571
KB975025
KB975364-IE8
KB975467
KB975558_WM8
KB975560
KB975562
KB975713
KB976098-v2
KB976323
KB976325-IE8
KB976662-IE8
KB976749-IE8
KB977165-v2
KB977290
KB977816
KB977914
KB978037
KB978207-IE8
KB978251
KB978262
KB978338
KB978542
KB978601
KB978695
KB978706
KB979306
KB979309
KB979482
KB979559
KB979683
KB979687
KB979907
KB980182-IE8
KB980195
KB980218
KB980232
KB980436
KB981322
KB981332-IE8
KB981550
KB981793
KB981957
KB982132
KB982214
KB982381-IE8
KB982802
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : LOGOS
IP Address . . . . . . . . : 192.168.2.100
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.2.1
Primary WINS Server. . . . : 192.168.2.101
Dns Servers. . . . . . . . : 208.67.222.222
208.67.220.220
192.168.2.1
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
No remote names have been found.
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative DNS server for the name
'LOGOS.KCG.LOCAL.'. [RCODE_SERVER_FAILURE]
The name 'LOGOS.KCG.LOCAL.' may not be registered in DNS.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '208.67.222.222'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC are not registered correctly on DNS server '208.67.220.220'. Please wait for 30 minutes for DNS server replication.
[WARNING] The DNS entries for this DC cannot be verified right now on DNS server 192.168.2.1, ERROR_TIMEOUT.
[FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
---------------------------------------------------------
This is the netdiag /fix output:
.......................................
Computer Name: LOGOS
DNS Host Name: LOGOS.KCG.LOCAL
System info : Windows 2000 Server (Build 3790)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
List of installed hotfixes :
KB2079403
KB2115168
KB2121546
KB2141007
KB2158563
KB2160329
KB2183461-IE8
KB2207559
KB2229593
KB2259922
KB2279986
KB2286198
KB2296011
KB2296199
KB2345886
KB2347290
KB2360131-IE8
KB2360937
KB2378111
KB2387149
KB2393802
KB2412687
KB2416400-IE8
KB2416451
KB2419635
KB2423089
KB2436673
KB2440591
KB2443105
KB2443685
KB2467659
KB2476490
KB2476687
KB2478953
KB2478960
KB2478971
KB2479628
KB2482017-IE8
KB2483185
KB2485376
KB2485663
KB2497640-IE8
KB2503658
KB2503665
KB2506212
KB2506223
KB2507618
KB2507938
KB2508272
KB2508429
KB2509553
KB2510531-IE8
KB2511455
KB2524375
KB2530548-IE8
KB2535512
KB2536276
KB2536276-v2
KB2544521-IE8
KB2544893
KB2544893-v2
KB2555917
KB2559049-IE8
KB2562485
KB2562937
KB2564958
KB2566454
KB2567053
KB2567680
KB2570222
KB2570791
KB2570947
KB2572069
KB2584146
KB2585542
KB2586448-IE8
KB2592799
KB2598479
KB2601626
KB2603381
KB2607712
KB2616676-v2
KB2618444-IE8
KB2618451
KB2620712
KB2621146
KB2624667
KB2631813
KB2633171
KB2633952-v2
KB2638806
KB2639417
KB2641690-v2
KB2644615
KB2645640
KB2646524
KB2647516-IE8
KB2656358
KB2660465
KB923561
KB924667-v2
KB925398_WMP64
KB925902-v2
KB926122
KB927891
KB929123
KB930178
KB931784
KB932168
KB933854
KB936357
KB941569
KB942831
KB943055
KB943460
KB944653
KB945553
KB946026
KB948496
KB950762
KB950974
KB951066
KB951748
KB952004
KB952069
KB952954
KB953298
KB954155
KB954550-v5
KB955069
KB955759
KB956572
KB956802
KB956803
KB956844
KB957097
KB958469
KB958644
KB958687
KB958869
KB959426
KB960225
KB960803
KB960859
KB961063
KB961118
KB961371-v2
KB961501
KB967715
KB967723
KB968389
KB968537
KB968816
KB969059
KB969883
KB969947
KB970238
KB970430
KB970653-v3
KB971029
KB971032
KB971468
KB971486
KB971557
KB971633
KB971657
KB971737
KB971961-IE8
KB972270
KB973037
KB973354
KB973507
KB973525
KB973540
KB973687
KB973815
KB973869
KB973904
KB974112
KB974318
KB974392
KB974455-IE8
KB974571
KB975025
KB975364-IE8
KB975467
KB975558_WM8
KB975560
KB975562
KB975713
KB976098-v2
KB976323
KB976325-IE8
KB976662-IE8
KB976749-IE8
KB977165-v2
KB977290
KB977816
KB977914
KB978037
KB978207-IE8
KB978251
KB978262
KB978338
KB978542
KB978601
KB978695
KB978706
KB979306
KB979309
KB979482
KB979559
KB979683
KB979687
KB979907
KB980182-IE8
KB980195
KB980218
KB980232
KB980436
KB981322
KB981332-IE8
KB981550
KB981793
KB981957
KB982132
KB982214
KB982381-IE8
KB982802
Q147222
Netcard queries test . . . . . . . : Passed
Per interface results:
Adapter : Local Area Connection
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : LOGOS
IP Address . . . . . . . . : 192.168.2.100
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.2.1
Primary WINS Server. . . . : 192.168.2.101
Dns Servers. . . . . . . . : 208.67.222.222
208.67.220.220
192.168.2.1
AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.
WINS service test. . . . . : Passed
Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
1 NetBt transport currently configured.
Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Failed
[WARNING] Cannot find a primary authoritative DNS server for the name
'LOGOS.KCG.LOCAL.'. [RCODE_SERVER_FAILURE]
The name 'LOGOS.KCG.LOCAL.' may not be registered in DNS.
[FATAL] Failed to fix: DC DNS entry KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.pdc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.6f5acbdb-19aa-4d29-8e2c-5890248cecbe.domains._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry gc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry f0857118-0ec2-4e36-b955-078b3a56b9cc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kerberos._tcp.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kerberos._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kerberos._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _gc._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _gc._tcp.Default-First-Site-Name._sites.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kerberos._udp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._tcp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _kpasswd._udp.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Failed to fix: DC DNS entry _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.KCG.LOCAL. re-registeration on DNS server '208.67.222.222' failed.
DNS Error code: DNS_ERROR_RCODE_SERVER_FAILURE
[FATAL] Fix Failed: netdiag failed to re-register missing DNS entries for this DC on DNS server '208.67.222.222'.
[FATAL] No DNS servers have the DNS records for this DC registered.
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
The redir is bound to 1 NetBt transport.
List of NetBt transports currently bound to the browser
NetBT_Tcpip_{8A2997E9-CD11-47D4-A0E0-A43A9A43F7A7}
The browser is bound to 1 NetBt transport.
DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Skipped
Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.
Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
_________________________________________________________
Now, I'm pretty sure that if I remove the 208.* DNS entries for the Network Adapter's TCP/IP Settings that this should fix it. The next question is this: how do I add EXTERNAL DNS Resolution for the DNS Server so that my clients only need to use 1 DNS Server for their own TCP/IP settings? Is that going to be additional lookup zones?
All of these issues are keeping me from getting Exchange 2003 running on a separate box. *ANY* input ot guidance would be helpfull.
Thanks!
--Scott