Windows 2008: Cannot access by computer_name

[Meinolf Weber [MVP-DS]]

Hello Johnny,

Open AD Users and computers, in the left pane you see your AD domain name
at the top. For DNS open the DNS management console and use the forward lookup
zone, there are 2 entries _msdsc.domain.com and domain.com or maybe more
or less, please post them all.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf,
>
> Is there a command I can type that will show me these two information?
> This way I can just copy and post it for you to take a look it.
>
> Johnny
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Johnny,
>>
>> Please post your AD domain name and DNS domain name.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> How do I fix this problem?
>>>
>>> Event ID 4013, Source: DNS-Server-Service
>>>
>>> The DNS server is waiting for Active Directory Domain Services (AD
>>> DS) to signal that the initial synchronization of the directory has
>>> been completed. The DNS server service cannot start until the
>>> initial synchronization is complete because critical DNS data might
>>> not yet be replicated onto this domain controller. If events in the
>>> AD DS event log indicate that there is a problem with DNS name
>>> resolution, consider adding the IP address of another DNS server for
>>> this domain to the DNS server list in the Internet Protocol
>>> properties of this computer. This event will be logged every two
>>> minutes until AD DS has signaled that the initial synchronization
>>> has successfully completed.
>>>
>>> "Meinolf Weber [MVP-DS]" wrote:
>>>
>>>> Hello Johnny,
>>>>
>>>> Default Gateway . . . . . . . . . : 192.168.0.1
>>>> DHCP Server . . . . . . . . . . . : 192.168.0.10
>>>> DNS Servers . . . . . . . . . . . : 192.168.0.1
>>>> Change that to:
>>>> Default Gateway . . . . . . . . . : 192.168.0.1
>>>> DHCP Server . . . . . . . . . . . : 192.168.0.10
>>>> DNS Servers . . . . . . . . . . . : 192.168.0.10
>>>> Difference on DNS is 1 and 10!!!
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> No, My router is not providing the DNS. I don't see where in the
>>>>> router I can
>>>>> change it.
>>>>> I did put the router IP in the Forwarder under DNS, but it seems
>>>>> Win2008
>>>>> does not work this way, I had to put it in Default Gateway
>>>>> (server).
>>>>> Johnny
>>>>> "Meinolf Weber [MVP-DS]" wrote:
>>>>>> Hello Johnny,
>>>>>>
>>>>>> The problem is 192.168.0.1 the default gateway also is the DNS
>>>>>> preferred. Your router is providing DNS? Then change it to the
>>>>>> server.
>>>>>>
>>>>>> To get internet access for the domain, you have then to configure
>>>>>> a FORWARDER under the DNS server properties in the DNS management
>>>>>> console to your ISP's DNS server.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers
>>>>>> no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> 192.168.0.1
>>>>>>>

[Johnny]

For AD name: KOOL.COM
For DNS, under forward Lookup Zones:
_msdcs.KOOl.COM
KOOL.COM

Under "_msdcs.KOOl.COM", I have one Host (A):
NETSERVER Host(A) 192.168.0.10 static

Under KOOL.COM
I have the server its own, and the clients PCs.



"Meinolf Weber [MVP-DS]" wrote:

> Hello Johnny,
>
> Open AD Users and computers, in the left pane you see your AD domain name
> at the top. For DNS open the DNS management console and use the forward lookup
> zone, there are 2 entries _msdsc.domain.com and domain.com or maybe more
> or less, please post them all.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Meinolf,
> >
> > Is there a command I can type that will show me these two information?
> > This way I can just copy and post it for you to take a look it.
> >
> > Johnny
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Johnny,
> >>
> >> Please post your AD domain name and DNS domain name.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> How do I fix this problem?
> >>>
> >>> Event ID 4013, Source: DNS-Server-Service
> >>>
> >>> The DNS server is waiting for Active Directory Domain Services (AD
> >>> DS) to signal that the initial synchronization of the directory has
> >>> been completed. The DNS server service cannot start until the
> >>> initial synchronization is complete because critical DNS data might
> >>> not yet be replicated onto this domain controller. If events in the
> >>> AD DS event log indicate that there is a problem with DNS name
> >>> resolution, consider adding the IP address of another DNS server for
> >>> this domain to the DNS server list in the Internet Protocol
> >>> properties of this computer. This event will be logged every two
> >>> minutes until AD DS has signaled that the initial synchronization
> >>> has successfully completed.
> >>>
> >>> "Meinolf Weber [MVP-DS]" wrote:
> >>>
> >>>> Hello Johnny,
> >>>>
> >>>> Default Gateway . . . . . . . . . : 192.168.0.1
> >>>> DHCP Server . . . . . . . . . . . : 192.168.0.10
> >>>> DNS Servers . . . . . . . . . . . : 192.168.0.1
> >>>> Change that to:
> >>>> Default Gateway . . . . . . . . . : 192.168.0.1
> >>>> DHCP Server . . . . . . . . . . . : 192.168.0.10
> >>>> DNS Servers . . . . . . . . . . . : 192.168.0.10
> >>>> Difference on DNS is 1 and 10!!!
> >>>> Best regards
> >>>>
> >>>> Meinolf Weber
> >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>> and
> >>>> confers
> >>>> no rights.
> >>>> ** Please do NOT email, only reply to Newsgroups
> >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>>>> No, My router is not providing the DNS. I don't see where in the
> >>>>> router I can
> >>>>> change it.
> >>>>> I did put the router IP in the Forwarder under DNS, but it seems
> >>>>> Win2008
> >>>>> does not work this way, I had to put it in Default Gateway
> >>>>> (server).
> >>>>> Johnny
> >>>>> "Meinolf Weber [MVP-DS]" wrote:
> >>>>>> Hello Johnny,
> >>>>>>
> >>>>>> The problem is 192.168.0.1 the default gateway also is the DNS
> >>>>>> preferred. Your router is providing DNS? Then change it to the
> >>>>>> server.
> >>>>>>
> >>>>>> To get internet access for the domain, you have then to configure
> >>>>>> a FORWARDER under the DNS server properties in the DNS management
> >>>>>> console to your ISP's DNS server.
> >>>>>>
> >>>>>> Best regards
> >>>>>>
> >>>>>> Meinolf Weber
> >>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
> >>>>>> and
> >>>>>> confers
> >>>>>> no rights.
> >>>>>> ** Please do NOT email, only reply to Newsgroups
> >>>>>> ** HELP us help YOU!!!
> >>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
> >>>>>>> 192.168.0.1
> >>>>>>>
>
>
>

[Kevin D. Goodknecht Sr. [MVP]]

Read inline please.

In news:9B496257-6732-44A1-AC3F-66AD273270A8@microsoft.com,
Johnny <Johnny@discussions.microsoft.com> wrote:
> For AD name: KOOL.COM
> For DNS, under forward Lookup Zones:
> _msdcs.KOOl.COM
> KOOL.COM
>
> Under "_msdcs.KOOl.COM", I have one Host (A):
> NETSERVER Host(A) 192.168.0.10 static

There actually should not be a host record in the zone, _msdcs.kool.com. You
should have in addition to an NS record and a SOA record:

<VeryLongGUID> CNAME netserver.kool.com

-and 4 sub domains-

dc
domains
gc
pdc

If you are looking in the _msdcs(Gray) Sub domain, which is a Delegation, NS
records for all servers, including itself, that have the full
_msdcs.kool.com Forward lookup zone.






--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

[Johnny]

Yes I have exactly what you have described (4 sub domains) + a very long name.
I removed the A host record.
and I still cannot ping by name, only by IP.

Johnny


"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Read inline please.
>
> In news:9B496257-6732-44A1-AC3F-66AD273270A8@microsoft.com,
> Johnny <Johnny@discussions.microsoft.com> wrote:
> > For AD name: KOOL.COM
> > For DNS, under forward Lookup Zones:
> > _msdcs.KOOl.COM
> > KOOL.COM
> >
> > Under "_msdcs.KOOl.COM", I have one Host (A):
> > NETSERVER Host(A) 192.168.0.10 static
>
> There actually should not be a host record in the zone, _msdcs.kool.com. You
> should have in addition to an NS record and a SOA record:
>
> <VeryLongGUID> CNAME netserver.kool.com
>
> -and 4 sub domains-
>
> dc
> domains
> gc
> pdc
>
> If you are looking in the _msdcs(Gray) Sub domain, which is a Delegation, NS
> records for all servers, including itself, that have the full
> _msdcs.kool.com Forward lookup zone.
>
>
>
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>

[Kevin D. Goodknecht Sr. [MVP]]

Read inline please.

In news:640A8365-33DE-4004-9344-8EE65C07BAFF@microsoft.com,
Johnny <Johnny@discussions.microsoft.com> wrote:
> Yes I have exactly what you have described (4 sub domains) + a very
> long name. I removed the A host record.
> and I still cannot ping by name, only by IP.


Ping is not the correct tool for checking name resolution. Do all clients
use the internal DNS server ONLY?
Do they have the correct DNS Suffix search list? (Assuming you are pinging
the host name only)
Can you ping the fully qualified name?

Does nslookup resolve the name?



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

[Johnny]

Yes, all the clients use internal DNS only.
the nslookup cannot resolve the name.

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Read inline please.
>
> In news:640A8365-33DE-4004-9344-8EE65C07BAFF@microsoft.com,
> Johnny <Johnny@discussions.microsoft.com> wrote:
> > Yes I have exactly what you have described (4 sub domains) + a very
> > long name. I removed the A host record.
> > and I still cannot ping by name, only by IP.
>
>
> Ping is not the correct tool for checking name resolution. Do all clients
> use the internal DNS server ONLY?
> Do they have the correct DNS Suffix search list? (Assuming you are pinging
> the host name only)
> Can you ping the fully qualified name?
>
> Does nslookup resolve the name?
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>

[Ace Fekay [Microsoft Certified Trainer]]

In news:9926DACB-6840-47C4-B7B1-FFD1827380C2@microsoft.com,
Johnny <Johnny@discussions.microsoft.com>, posted the following:
> Yes, all the clients use internal DNS only.
> the nslookup cannot resolve the name.

Can you copy and paste an example of an nslookup result showing us the
errors or non-resolution you are seeing? That will better help us to help
you. I believe I asked that before, but I did not see a reply. Try the
following:

nslookup
netserver
(please post your results)

netserver.kool.com
(please post your results)

Then try it with the following 'set vc' switch:

nslookup
set vc
netserver
(please post the results)

netserver.kool.com
(please post your results)


Also, is there a firewall rule running on all machines and the DC to stop
pings (ICMP echo) from working, as well as DNS queries (UDP or TCP 53)?

Looking forward to your results. If you have more tests that I didn';t
mention, please post them too!

Thank you,

Ace

[Johnny]

I demoted to workgroup and re-install the AD & DNS server, I change the Ip to
192.168.0.2 to see it will work or not, it did not.

Here is the NSLOOKUP from Server

C:\>nslookup
Default Server: netsever.kool.com
Address: 192.168.0.2

> netserver
Server: netsever.kool.com
Address: 192.168.0.2

*** netsever.kool.com can't find netserver: Non-existent domain
>exit


"Ace Fekay [Microsoft Certified Trainer]" wrote:

> In news:9926DACB-6840-47C4-B7B1-FFD1827380C2@microsoft.com,
> Johnny <Johnny@discussions.microsoft.com>, posted the following:
> > Yes, all the clients use internal DNS only.
> > the nslookup cannot resolve the name.
>
> Can you copy and paste an example of an nslookup result showing us the
> errors or non-resolution you are seeing? That will better help us to help
> you. I believe I asked that before, but I did not see a reply. Try the
> following:
>
> nslookup
> netserver
> (please post your results)
>
> netserver.kool.com
> (please post your results)
>
> Then try it with the following 'set vc' switch:
>
> nslookup
> set vc
> netserver
> (please post the results)
>
> netserver.kool.com
> (please post your results)
>
>
> Also, is there a firewall rule running on all machines and the DC to stop
> pings (ICMP echo) from working, as well as DNS queries (UDP or TCP 53)?
>
> Looking forward to your results. If you have more tests that I didn';t
> mention, please post them too!
>
> Thank you,
>
> Ace
>
>

[Ace Fekay [Microsoft Certified Trainer]]

In news:21C5038A-2E02-4724-A4C6-2338972AEC32@microsoft.com,
Johnny <Johnny@discussions.microsoft.com>, posted the following:
> I demoted to workgroup and re-install the AD & DNS server, I change
> the Ip to 192.168.0.2 to see it will work or not, it did not.
>
> Here is the NSLOOKUP from Server
>
> C:\>nslookup
> Default Server: netsever.kool.com
> Address: 192.168.0.2
>
>> netserver
> Server: netsever.kool.com
> Address: 192.168.0.2
>
> *** netsever.kool.com can't find netserver: Non-existent domain
>> exit
>
>
You demoted your domain controller? Why?

Try it with:
> netserver.kool.com

If that worked, then it's telling me that the search suffix on the machine
you are running this is not kool.com, or it has been changed, or the record
'netserver' does not exist in the DNS zone under the search suffix domain
name the machine you are running this on is set to.

For example, from my own workstation, which has a different search suffix
than my domain, I tried to look up a name called 'bob' on my machine:

> bob
Server: london.contoso.com
Address: 192.168.1.40

*** london.contoso.com can't find bob: Non-existent domain

This means that 'bob' does not exist under the zone the search suffix on my
machine is set to, which is 'nwtraders.com.'

However, when I did an nslookup for bob.contoso.com (using the full FQDN),
it gave me a proper response.


Can you post your new ipconfig /all, please?

Thanks,
Ace

[Kevin D. Goodknecht Sr. [MVP]]

Read inline please.

In news:21C5038A-2E02-4724-A4C6-2338972AEC32@microsoft.com,
Johnny <Johnny@discussions.microsoft.com> wrote:
> I demoted to workgroup and re-install the AD & DNS server, I change
> the Ip to 192.168.0.2 to see it will work or not, it did not.
>
> Here is the NSLOOKUP from Server
>
> C:\>nslookup
> Default Server: netsever.kool.com
> Address: 192.168.0.2
>
>> netserver
> Server: netsever.kool.com
> Address: 192.168.0.2
>
> *** netsever.kool.com can't find netserver: Non-existent domain
>> exit

Put nslookup in verbose mode and repost the results.

C:\nslookup
>set d2
>netserver



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================