DNS troubleshooting for dummies (Me).

Doringblik

Well-Known Member
Joined
Apr 16, 2018
Messages
115
Reaction score
1
Location
Cape Town
Hi everyone.

I am trying to troubleshoot our Server 2016 DNS. We have one server which is the AD-DC and DNS server. Not DHCP server as that is managed by our Unifi Security Gateway.

I am an un-qualified self taught IT generalist. I installed and configured the Server 2016 with active directory and the rest that goes with it, DNS etc, based on my general knowledge. It is functional and has been running fairly well for about a year now except for slow networking and delays in printing etc that I can only think has to do with poor DNS configuration. The test and it's results that I will be posting below seems to verify this. Yet I do not know how to fix these issues found in the test result. This is where your help, which as always is much appreciated, comes in. So, thank you in advance.

I ran the following test:

Code:
dcdiag /test:dns /v /s:<DCName> /DnsBasic /f:dcdiagreport.txt

The results were as follows:

Code:
Directory Server Diagnosis


Performing initial setup:

   * Connecting to directory service on server myserver.

   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=mydc,DC=co,DC=za,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=co,DC=za
   Getting ISTG and options for the site
   * Identifying all servers.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=mydc,DC=co,DC=za,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=myservername,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=co,DC=za
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.

   * Found 1 DC(s). Testing 1 of them.

   Done gathering initial info.


Doing initial required tests

  
   Testing server: Default-First-Site-Name\myservername

      Starting test: Connectivity

         * Active Directory LDAP Services Check
         The host d9bccbcf-9db8-40fc-a560-37f053f83a12._msdcs.mydomain.co.za could not be resolved to an IP address.

         Check the DNS server, DHCP, server name, etc.

         Neither the the server name (myservername.mydomain.co.za) nor the Guid DNS name

         (d9bccbcf-9db8-40fc-a560-37f053f83a12._msdcs.mydomain.co.za) could be resolved by DNS.  Check that the server

         is up and is registered correctly with the DNS server.
         Got error while checking LDAP and RPC connectivity. Please check your firewall settings.

         ......................... myservername failed test Connectivity



Doing primary tests

  
   Testing server: Default-First-Site-Name\myservername

      Test omitted by user request: Advertising

      Test omitted by user request: CheckSecurityError

      Test omitted by user request: CutoffServers

      Test omitted by user request: FrsEvent

      Test omitted by user request: DFSREvent

      Test omitted by user request: SysVolCheck

      Test omitted by user request: KccEvent

      Test omitted by user request: KnowsOfRoleHolders

      Test omitted by user request: MachineAccount

      Test omitted by user request: NCSecDesc

      Test omitted by user request: NetLogons

      Test omitted by user request: ObjectsReplicated

      Test omitted by user request: OutboundSecureChannels

      Test omitted by user request: Replications

      Test omitted by user request: RidManager

      Test omitted by user request: Services

      Test omitted by user request: SystemLog

      Test omitted by user request: Topology

      Test omitted by user request: VerifyEnterpriseReferences

      Test omitted by user request: VerifyReferences

      Test omitted by user request: VerifyReplicas

  
      Starting test: DNS

        

         DNS Tests are running and not hung. Please wait a few minutes...

         See DNS test in enterprise tests section for results
         ......................... myservername failed test DNS

  
   Running partition tests on : ForestDnsZones

      Test omitted by user request: CheckSDRefDom

      Test omitted by user request: CrossRefValidation

  
   Running partition tests on : DomainDnsZones

      Test omitted by user request: CheckSDRefDom

      Test omitted by user request: CrossRefValidation

  
   Running partition tests on : Schema

      Test omitted by user request: CheckSDRefDom

      Test omitted by user request: CrossRefValidation

  
   Running partition tests on : Configuration

      Test omitted by user request: CheckSDRefDom

      Test omitted by user request: CrossRefValidation

  
   Running partition tests on : mydc

      Test omitted by user request: CheckSDRefDom

      Test omitted by user request: CrossRefValidation

  
   Running enterprise tests on : mydomain.co.za

      Starting test: DNS

         Test results for domain controllers:

            
            DC: myservername.mydomain.co.za

            Domain: mydomain.co.za

            

                  
               TEST: Authentication (Auth)
                  Authentication test: Successfully completed
                  
               TEST: Basic (Basc)
                  Error: No LDAP connectivity
                  Error: No WMI connectivity
                  [Error details: 0x800706ba (Type: HRESULT - Facility: Win32, Description: The RPC server is unavailable.) - Connection to WMI server failed]
                  No host records (A or AAAA) were found for this DC

        
         Summary of DNS test results:

        
                                            Auth Basc Forw Del  Dyn  RReg Ext
            _________________________________________________________________
            Domain: mydomain.co.za

               myservername               PASS FAIL n/a  n/a  n/a  n/a  n/a 
        
         ......................... mydomain.co.za failed test DNS

      Test omitted by user request: LocatorCheck

      Test omitted by user request: Intersite

One more thing I think I should note is that I set the domain name the same as our external website and email domain name. That originally caused our email to not function but I fixed it with an A-record for the external domain and it's IP address. Not sure if this could be causing any other local issues.

That's where I am at now. Thank you once again in advance for your help.
 
What's the output when you verify the SRV record?

Command prompt and type:
nslookup
set type=all
_ldap._tcp.dc._msdcs.yourdomain.co.za
 
Hi.

> set type=all > _ldap._tcp.dc._msdcs.mydomain.co.za Server: ip6-localhost Address: ::1 _ldap._tcp.dc._msdcs.mydomain.co.za SRV service location: priority = 0 weight = 100 port = 389 svr hostname = MYSERVER.mydomain.co.za MYSERVER.mydomain.co.za internet address = 192.168.1.252
 
Top
Sign up to the MyBroadband newsletter
X