dns event error : 4015 , 4004 , 6702

to MVP

i have a forest is win2003 , exchange2003 , and child domain using vpn in
china
also is win2003 , exchange 2003 , but my child-domain DNS server dns always
have 3
event error , dns event 4004 and , 4015 just one months have one day will
popup few
time , but dns event 6702 everyday have this error pop up
pls teach me , how can i solve this problem
thank your very much


dns event 4004

The DNS server was unable to complete directory service enumeration of zone
7.168.192.in-addr.arpa. This DNS server is configured to use information
obtained from Active Directory for this zone and is unable to load the zone
without it. Check that the Active Directory is functioning properly and
repeat enumeration of the zone. The extended error debug information (which
may be empty) is "". The event data contains the error.

dns event 4015

The DNS server has encountered a critical error from the Active Directory.
Check that the Active Directory is functioning properly. The extended error
debug information (which may be empty) is "". The event data contains the
error.

dns event 6702

DNS server has updated its own host (A) records. In order to ensure that
its DS-integrated peer DNS servers are able to replicate with this server,
an attempt was made to update them with the new records through dynamic
update. An error was encountered during this update, the record data is the
error code.

If this DNS server does not have any DS-integrated peers, then this error
should be ignored.

If this DNS server's Active Directory replication partners do not have the
correct IP address(es) for this server, they will be unable to replicate
with it.

To ensure proper replication:
1) Find this server's Active Directory replication partners that run the DNS
server.
2) Open DnsManager and connect in turn to each of the replication partners.
3) On each server, check the host (A record) registration for THIS server.
4) Delete any A records that do NOT correspond to IP addresses of this
server.
5) If there are no A records for this server, add at least one A record
corresponding to an address on this server, that the replication partner can
contact. (In other words, if there multiple IP addresses for this DNS
server, add at least one that is on the same network as the Active Directory
DNS server you are updating.)
6) Note, that is not necessary to update EVERY replication partner. It is
only necessary that the records are fixed up on enough replication partners
so that every server that replicates with this server will receive (through
replication) the new data.

For more information, see Help and Support Center at

Do these errors happen only at startup?

Do your DCs point only to themselves for DNS?

Configure each DC to use itself and at least one other DC for DNS.

just everyday have once time event 6702 error
sometimes is 4:59pm sometimes is 1:02 pm ,8:01 pm also have
don't know why suddenly have this error
seem when i pormo child domain , and child domain dns , then have this event
pop up

now child-domain frist dns is point to itself and second is point to root
domain DNS
another DC in child-domain is point to root domain dns , second is point to
child-domain dns
root domain dns is point to itself

thx your help

Which DNS has the zone for the child domain?
If it's the child DNS, is the child sub domain name delegated in the parent
zone?
Does the _msdcs.ForestRootZone exist on all DNS servers?

Use netdiag /test:dns and dcdiag /test:dns

The netdiag will test that all DCs are registered in all DNS server, one of
the tests in the DCdiag is testing for broken delegations.

Zones that should appear in the parent DNS:
ForestRoot<--( MicrosoftDNS partition)
_msdcs.forestroot<--This zone should be set to replicate too All DNS servers
in the Forest. (ForestDNSZones)

Delegations that should appear in the ForestRoot Zone.
_msdcs
child

Zones that should appear in the Child DNS servers:

_msdcs.ForestRoot<--Replicated from the forest root DNS servers.
Child.forestRoot

The child name should be delegated in the ForestRoot zone to all DNS servers
that have the full child zone.

By default the forestRoot and Child.forestroot are replicated to "All Domain
Controllers in the Active Directory Domain <ADDomainName> (MicrosoftDNS
Partition)

i seem fix the problem , thanks