DNS and main domain controller is not working

ahmed bakr · 11-03-2009

my primary domain controller and the only dns server failed this morning and
not opening.
i had additonal domain controller in other brach city. when adding the
primary domain controller back to the domain as alternative it give meerror
the"

he following error occurred when DNS was queried for the service location
(SRV) resource record used to locate a domain controller for domain sanad.itg:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg

Common causes of this error include the following:

- The DNS SRV records required to locate a domain controller for the domain
are not registered in DNS. These records are registered with a DNS server
automatically when a domain controller is added to a domain. They are updated
by the domain controller at set intervals. This computer is configured to use
DNS servers with following IP addresses:

10.0.1.41

- One or more of the following zones do not include delegation to its child
zone:

sanad.itg
itg
.. (the root zone)

For information about correcting this problem, click Help."

how to solve this problem.

please help me.

Meinolf Weber [MVP-DS] · 11-03-2009

Hello ahmed,

How did you bring it back to the domain, restore or restart, please describe
in detail what you have done? Is the branch office server also DNS server?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> my primary domain controller and the only dns server failed this
> morning and
> not opening.
> i had additonal domain controller in other brach city. when adding the
> primary domain controller back to the domain as alternative it give
> meerror
> the"
> he following error occurred when DNS was queried for the service
> location (SRV) resource record used to locate a domain controller for
> domain sanad.itg:
>
> The error was: "DNS name does not exist."
> (error code 0x0000232B RCODE_NAME_ERROR)
> The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg
>
> Common causes of this error include the following:
>
> - The DNS SRV records required to locate a domain controller for the
> domain are not registered in DNS. These records are registered with a
> DNS server automatically when a domain controller is added to a
> domain. They are updated by the domain controller at set intervals.
> This computer is configured to use DNS servers with following IP
> addresses:
>
> 10.0.1.41
>
> - One or more of the following zones do not include delegation to its
> child zone:
>
> sanad.itg
> itg
> . (the root zone)
> For information about correcting this problem, click Help."
>
> how to solve this problem.
>
> please help me.
>

ahmed bakr · 11-03-2009

i can't return it back to domain.

and that server was the only dns serv i have. but i had created
alternatice dc at other brach.

"Meinolf Weber [MVP-DS]" wrote:

> Hello ahmed,
>
> How did you bring it back to the domain, restore or restart, please describe
> in detail what you have done? Is the branch office server also DNS server?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > my primary domain controller and the only dns server failed this
> > morning and
> > not opening.
> > i had additonal domain controller in other brach city. when adding the
> > primary domain controller back to the domain as alternative it give
> > meerror
> > the"
> > he following error occurred when DNS was queried for the service
> > location (SRV) resource record used to locate a domain controller for
> > domain sanad.itg:
> >
> > The error was: "DNS name does not exist."
> > (error code 0x0000232B RCODE_NAME_ERROR)
> > The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg
> >
> > Common causes of this error include the following:
> >
> > - The DNS SRV records required to locate a domain controller for the
> > domain are not registered in DNS. These records are registered with a
> > DNS server automatically when a domain controller is added to a
> > domain. They are updated by the domain controller at set intervals.
> > This computer is configured to use DNS servers with following IP
> > addresses:
> >
> > 10.0.1.41
> >
> > - One or more of the following zones do not include delegation to its
> > child zone:
> >
> > sanad.itg
> > itg
> > . (the root zone)
> > For information about correcting this problem, click Help."
> >
> > how to solve this problem.
> >
> > please help me.
> >
>
>
>

ahmed bakr · 11-03-2009

can you tell me how to solve this one

"Meinolf Weber [MVP-DS]" wrote:

> Hello ahmed,
>
> How did you bring it back to the domain, restore or restart, please describe
> in detail what you have done? Is the branch office server also DNS server?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > my primary domain controller and the only dns server failed this
> > morning and
> > not opening.
> > i had additonal domain controller in other brach city. when adding the
> > primary domain controller back to the domain as alternative it give
> > meerror
> > the"
> > he following error occurred when DNS was queried for the service
> > location (SRV) resource record used to locate a domain controller for
> > domain sanad.itg:
> >
> > The error was: "DNS name does not exist."
> > (error code 0x0000232B RCODE_NAME_ERROR)
> > The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg
> >
> > Common causes of this error include the following:
> >
> > - The DNS SRV records required to locate a domain controller for the
> > domain are not registered in DNS. These records are registered with a
> > DNS server automatically when a domain controller is added to a
> > domain. They are updated by the domain controller at set intervals.
> > This computer is configured to use DNS servers with following IP
> > addresses:
> >
> > 10.0.1.41
> >
> > - One or more of the following zones do not include delegation to its
> > child zone:
> >
> > sanad.itg
> > itg
> > . (the root zone)
> > For information about correcting this problem, click Help."
> >
> > how to solve this problem.
> >
> > please help me.
> >
>
>
>

Meinolf Weber [MVP-DS] · 11-03-2009

Hello ahmed,

Sorry, but you wrote:
"when adding the primary domain controller back to the domain as alternative
it give me error the"

so i thought you brought it back.

You have no backup of the machine so that you can restore it?

If you do not have a backup, change the preferred DNS on the branch DC to
it's own ip address and install DNS server role. Now you have to create a
new forward lookup zone for your domain, make it primary AD integrated zone.
If this is done, check that the existing DC is listed correct in the forward
lookup zone and i would also create a reverse lookup zone for the subnet.

Then you have to reconfigure all domain machines to use the new DNS server
on the NIC, either with DHCP scope options or manual on any machine. Then
run ipconfig /registerdns on the machines or reboot them and check that they
all register correct in the new DNS server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> i can't return it back to domain.
>
> and that server was the only dns serv i have. but i had created
> alternatice dc at other brach.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello ahmed,
>>
>> How did you bring it back to the domain, restore or restart, please
>> describe in detail what you have done? Is the branch office server
>> also DNS server?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> my primary domain controller and the only dns server failed this
>>> morning and
>>> not opening.
>>> i had additonal domain controller in other brach city. when adding
>>> the
>>> primary domain controller back to the domain as alternative it give
>>> meerror
>>> the"
>>> he following error occurred when DNS was queried for the service
>>> location (SRV) resource record used to locate a domain controller
>>> for
>>> domain sanad.itg:
>>> The error was: "DNS name does not exist."
>>> (error code 0x0000232B RCODE_NAME_ERROR)
>>> The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg
>>> Common causes of this error include the following:
>>>
>>> - The DNS SRV records required to locate a domain controller for the
>>> domain are not registered in DNS. These records are registered with
>>> a DNS server automatically when a domain controller is added to a
>>> domain. They are updated by the domain controller at set intervals.
>>> This computer is configured to use DNS servers with following IP
>>> addresses:
>>>
>>> 10.0.1.41
>>>
>>> - One or more of the following zones do not include delegation to
>>> its child zone:
>>>
>>> sanad.itg
>>> itg
>>> . (the root zone)
>>> For information about correcting this problem, click Help."
>>> how to solve this problem.
>>>
>>> please help me.
>>>

Kevin D. Goodknecht [MVP] · 12-03-2009

"ahmed bakr" <ahmed bakr@discussions.microsoft.com> wrote in message
news:79CD5679-3CF0-45C7-B01B-5D4F0B19391E@microsoft.com...
> my primary domain controller and the only dns server failed this morning
> and
> not opening.
> i had additonal domain controller in other brach city. when adding the
> primary domain controller back to the domain as alternative it give
> meerror
> the"
>
> he following error occurred when DNS was queried for the service location
> (SRV) resource record used to locate a domain controller for domain
> sanad.itg:
>
> The error was: "DNS name does not exist."
> (error code 0x0000232B RCODE_NAME_ERROR)
>
> The query was for the SRV record for _ldap._tcp.dc._msdcs.sanad.itg
>
> Common causes of this error include the following:
>
> - The DNS SRV records required to locate a domain controller for the
> domain
> are not registered in DNS. These records are registered with a DNS server
> automatically when a domain controller is added to a domain. They are
> updated
> by the domain controller at set intervals. This computer is configured to
> use
> DNS servers with following IP addresses:
>
> 10.0.1.41
>
> - One or more of the following zones do not include delegation to its
> child
> zone:
>
> sanad.itg
> itg
> . (the root zone)
>
> For information about correcting this problem, click Help."
>
> how to solve this problem.

On the information you have given us, it would be very difficult to tell you
how to solve your problem when you have not properly described the issue.
You said the only DNS server failed, which is apparently the failed server,
and you are attempting to add it back as an alternative.

Question, did you have to restore it from backup, or did you reinstall the
OS and you are trying to promote it back into the domain or was it neither?

Was it just DNS that failed and now you cannot logon?

If DNS was all that failed, install DNS on the additional DC at the remote
site, make sure it has the sanad.itg Forward lookup zone and run DCdiag /fix
and netdiag /fix, then put its IP as the Alternate DNS for both DCs. If
replication had not completely stopped and let each DC get tombstone in the
other DC's AD database, which takes sixty days, all should be well. If you
have to create the zone on the remote DC, you may have to remove a
conflicting zone from AD when the other DC gets back up.

--
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================