DNSApi Event Log Error ID: 11160

Hi all,
I have 3 W2k3 DC's configured as DNS for redundancy. Yesterday 2 or
3 of my member servers starting logging this error message, and it
continues to log this “11160” error message when I run “ipconfig
/registerdns” (note: all clients are Static IP), so I run “netdiag
/debug” on all DC’s and all servers with DNS issue, all test passed.
HELP!!

Contents of the error message in event viewer:

The system failed to register pointer (PTR) resource records (RRs) for
network adapter
with settings:

Adapter Name : {*}
Host Name : member server name
Adapter-specific Domain Suffix : FQDN
DNS server list :all IP’s in DNS server search order
Sent update to server : Primary DNS Server IP
IP Address : local machine IP

The reason that the system could not register these RRs was because
of a security related problem. The cause of this could be (a) your
computer does not have permissions to register and update the
specific DNS domain name set for this adapter, or (b) there might
have been a problem negotiating valid credentials with the DNS server
during the processing of the update request.

You can manually retry DNS registration of the network adapter and
its settings by typing "ipconfig /registerdns" at the command prompt.
If problems still persist, contact your DNS server or network systems
administrator.

Thanks,

In news:dsWdnZc85rzTKSXfRVn_vg@giganews.com,
jjackson <jjackson@aedcfcu-dot-org.no-spam.invalid> posted this:
> Hi all,
> I have 3 W2k3 DC's configured as DNS for redundancy. Yesterday 2 or
> 3 of my member servers starting logging this error message, and it
> continues to log this “11160” error message when I run “ipconfig
> /registerdns” (note: all clients are Static IP), so I run “netdiag
> /debug” on all DC’s and all servers with DNS issue, all test passed.
> HELP!!
>
> Contents of the error message in event viewer:
>
> The system failed to register pointer (PTR) resource records (RRs) for
> network adapter
> with settings:
>
> Adapter Name : {*}
> Host Name : member server name
> Adapter-specific Domain Suffix : FQDN
> DNS server list :all IP’s in DNS server search order
> Sent update to server : Primary DNS Server IP
> IP Address : local machine IP
>
> The reason that the system could not register these RRs was because
> of a security related problem. The cause of this could be (a) your
> computer does not have permissions to register and update the
> specific DNS domain name set for this adapter, or (b) there might
> have been a problem negotiating valid credentials with the DNS server
> during the processing of the update request.
>
> You can manually retry DNS registration of the network adapter and
> its settings by typing "ipconfig /registerdns" at the command prompt.
> If problems still persist, contact your DNS server or network systems
> administrator.
>
> Thanks,

Are all members using only the local DNS that supports the AD domain(only)?
Do you have a reverse lookup zone for the IP address subnet range?
On the Zone properties, security tab, does the Domain computers group have
Create / Delete child objects?

http://www.eventid.net/display.asp?e...DnsApi&phase=1

Post your ipconfig /all (unedited)


--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Are all members using only the local DNS that supports the AD
domain(only)?

YES

Do you have a reverse lookup zone for the IP address subnet range?

YES

On the Zone properties, security tab, does the Domain computers group
have
Create / Delete child objects?

YES

http://www.eventid.net/display.asp?e...DnsApi&phase=1


Post your ipconfig /all (unedited)
I will not post any server names or ip addresses


All DNS entries in the DNS tabs of all pc's in our network use our
private DNS servers only, the DNS server forwards unknown request to
the ISP dns server.

In news:w_udna6dstbdpSHfRVn_vg@giganews.com,
jjackson <jjackson@aedcfcu-dot-org.no-spam.invalid> posted this:
> Are all members using only the local DNS that supports the AD
> domain(only)?
>
> YES
>
> Do you have a reverse lookup zone for the IP address subnet range?
>
> YES
>
> On the Zone properties, security tab, does the Domain computers group
> have
> Create / Delete child objects?
>
> YES
>
> http://www.eventid.net/display.asp?e...DnsApi&phase=1
>
>
> Post your ipconfig /all (unedited)
> I will not post any server names or ip addresses
>
>
> All DNS entries in the DNS tabs of all pc's in our network use our
> private DNS servers only, the DNS server forwards unknown request to
> the ISP dns server.

Unless you are using public IP addresses in your ipconfig the information
can only be used to check your configuration. If you are using public IP
addresses as for example the DNS address, then your configuration is likely
to be incorrect.
The only thing I can recommend without your ipconfig /all is for you to call
MS Support services.

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Kevin,
There is no incorrect infor in my ip configuration, it is setup
exactly the same as all other machines/servers which are working
correctly. I just have 3 servers not working and one dc with some
issues. Which i am working on right now.

Joe

The fix to this issue was to remove some manually entered ptr records
that i had overlooked, Since the PTR records were manually created
the server did not have any permissions to update the record, after i
gave it permissions to update it correct the entry and fixed the error
i was getting in the event log.

Thanks for your help.

JJ