Windows Server

TagaR · Guest

I'm getting DNS errors on my DC1 everytime I restarted it. The following are
the errors on the event log;

4004
The DNS server was unable to complete directory service enumeration of zone
%1. This DNS server is configured to use information obtained from Active
Directory for this zone and is unable to load the zone without it. Check that
the Active Directory is functioning properly and repeat enumeration of the
zone. The event data contains the error.

4015
The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The event data
contains the error.

Also, my DC2 as DNS secondary is showing error on the event log;

6525
Zone transfer request for secondary zone %1 refused by master server at %2.
Check the zone at the master server %2 to verify that zone transfer is
enabled to this server. To do so, use the DNS console, and select master
server %2 as the applicable server, then in secondary zone %1 Properties,
view the settings on the Zone Transfers tab. Based on the settings you
choose, make any configuration adjustments there (or possibly in the Name
Servers tab) so that a zone transfer can be made to this server.

Help is much appreciated.
TagaR

Tom · Guest

Hi Tagar:

This is what I would suggest:

1) Disable active directory integrated DNS on both machines.
2) Select both servers to be their own primary zone for all DNS
directories.
3) Delete the corrupted DNS settings from your %1 DNS server
4) Set %1 DNS as a secondary zone for %2 for all DNS directories.
5) Allow zone transfers bi-directionally from %1 and %2 on both
machines
6) Make sure that both servers show up as registered DNS servers on
both DNS servers.
7) Replicate all entries to %1. Making sure they fully replicate for
all zones you have.
8) Make sure both DNS servers allow zone transfers from registered DNS
server list.
10) Re-enable active directory integrated DNS for both %1 and %2.
11) Enable Secure mode zone transfers for all zones on both servers.
12) check log for further errors. If you see duplicate DNS entries
within either server, stop DNS services on both machines and restart
them both one at a time.
My terminology is probably off a little, but i hope this helps.

Tom

Tom · Guest

Hi Tagar:

This is what I would suggest:

1) Disable active directory integrated DNS on both machines.
2) Select both servers to be their own primary zone for all DNS
directories.
3) Delete the corrupted DNS settings from your %1 DNS server
4) Set %1 DNS as a secondary zone for %2 for all DNS directories.
5) Allow zone transfers bi-directionally from %1 and %2 on both
machines
6) Make sure that both servers show up as registered DNS servers on
both DNS servers.
7) Replicate all entries to %1. Making sure they fully replicate for
all zones you have.
8) Make sure both DNS servers allow zone transfers from registered DNS
server list.
10) Re-enable active directory integrated DNS for both %1 and %2.
11) Enable Secure mode zone transfers for all zones on both servers.
12) check log for further errors. If you see duplicate DNS entries
within either server, stop DNS services on both machines and restart
them both one at a time.
My terminology is probably off a little, but i hope this helps.

Tom

TagaR · Guest

Tom, thanks for your reply. I have questions below proceeding your solution;

TagaR

"Tom" wrote:

TagaR · Guest

Thanks. My issue is now resolved.

TagaR

"Tom" wrote:

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1