0

I am finding that some computers on my network are not resolving DNS properly, while others work perfectly. Here's an example:

I have a Win10 machine. The IP address is fixed, and the two DNS servers listed are for my two DCs. Those are the ONLY DNS servers listed in the NIC. Nslookup WILL resolve Google.com, Yahoo.com and other external resources, but will NOT resolve anything internally, including my DC and backup DC. The result: can't find xx.xx.xx.xx: Server failed.

So far I have:

  1. Fixed the DNS settings on both domain controllers so that on DC1 the primary DNS server is DC2 and the secondary is the loopback 127.0.0.1 and on DC2 the primary server is DC1 and the secondary is also the loopback.

  2. Run and rerun ipconfig /flushdns and ipconfig /registerdns on the problem machine.

  3. I am able to ping both DCs from the problem machine.

  4. I have confirmed that DNS scavenging is turned on on both DCs.

  5. Run DCDiag.exe: My DC passes all DCDiag.exe tests except for SystemLog, where I receive an EventID: 0x00002720 error: The application-specific permission settings do not grant Local Activation permission for the COM Server app. I don't believe this is an issue that is related.

  6. Confirmed that DNS Scavenging is turned on.

Here are my IPConfig results from both DCs (I have already removed the IPv6 setting from DC2 and fixed the secondary DNS server on DC1 as noted above):

From the DC1:

Windows IP Configuration

  Host Name . . . . . . . . . . . . : DC1
  Primary Dns Suffix . . . . . . . : ad.mydomain.com
  Node Type . . . . . . . . . . . . : Hybrid
  IP Routing Enabled. . . . . . . . : No
  WINS Proxy Enabled. . . . . . . . : No
  DNS Suffix Search List. . . . . . : ad.mydomain.com

Ethernet adapter Ethernet:

  Connection-specific DNS Suffix . : 
  Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter
  Physical Address. . . . . . . . . : 00-15-5D-3A-AC-01
  DHCP Enabled. . . . . . . . . . . : No
  Autoconfiguration Enabled . . . . : Yes
  Link-local IPv6 Address . . . . . : fe80::1893:aecf:ee74:8f53%3(Preferred) 
  IPv4 Address. . . . . . . . . . . : 10.37.5.4(Preferred) 
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 10.37.5.1
  DHCPv6 IAID . . . . . . . . . . . : 50337117
  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-A0-F8-75-00-15-5D-3A-AC-01
  DNS Servers . . . . . . . . . . . : 10.37.5.5
                                         10.37.5.4
  NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{18F62078-3985-4555-8B8D-9A22F0FAB2DD}:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix . : 
  Description . . . . . . . . . . . : Microsoft ISATAP Adapter
  Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP Enabled. . . . . . . . . . . : No
  Autoconfiguration Enabled . . . . : Yes

From DC2:

Windows IP Configuration

  Host Name . . . . . . . . . . . . : DC2
  Primary Dns Suffix . . . . . . . : ad.mydomain.com
  Node Type . . . . . . . . . . . . : Hybrid
  IP Routing Enabled. . . . . . . . : No
  WINS Proxy Enabled. . . . . . . . : No
  DNS Suffix Search List. . . . . . : ad.mydomain.com

Ethernet adapter Ethernet:

  Connection-specific DNS Suffix . : 
  Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter
  Physical Address. . . . . . . . . : 00-15-5D-3A-AC-02
  DHCP Enabled. . . . . . . . . . . : No
  Autoconfiguration Enabled . . . . : Yes
  Link-local IPv6 Address . . . . . : fe80::6014:3627:6a13:d003%13(Preferred) 
  IPv4 Address. . . . . . . . . . . : 10.37.5.5(Preferred) 
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 10.37.5.1
  DHCPv6 IAID . . . . . . . . . . . : 50337117
  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-22-A1-01-93-00-15-5D-3A-AC-02
  DNS Servers . . . . . . . . . . . : ::1
                                      10.37.5.4
                                      127.0.0.1
  NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{E5B7E54F-DDDB-426C-9F8E-36D69E840440}:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix . : 
  Description . . . . . . . . . . . : Microsoft ISATAP Adapter
  Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
  DHCP Enabled. . . . . . . . . . . : No
  Autoconfiguration Enabled . . . . : Yes

Here also are the results of repadmin /replsummary and get-dnsserverforwarder:

Replication Summary Start Time: 2018-08-03 14:10:39
Beginning data collection for replication summary, this may take awhile:

  .....
Source DSA         largest delta   fails/total %% error

DC1                     21m:31s   0 / 5   0 
DC2                     23m:09s   0 / 5   0 

Destination DSA   largest delta   fails/total %% error

DC1                     23m:09s   0 / 5   0 
DC2                     21m:31s   0 / 5   0 

PS C:\Windows\system32> get-dnsserverforwarder

UseRootHint       : True
Timeout(s)       : 3
EnableReordering : True
IPAddress         : {8.8.8.8, 8.8.4.4, 65.106.1.196, 65.106.7.196}
ReorderedIPAddress : {8.8.8.8, 8.8.4.4, 65.106.1.196, 65.106.7.196}

I do not believe the issue is on the server since many machines resolve DNS just fine. Here is the ipconfig from the one of the machines with the problem:

Windows IP Configuration

  Host Name . . . . . . . . . . . . : host2
  Primary Dns Suffix . . . . . . . : 
  Node Type . . . . . . . . . . . . : Hybrid
  IP Routing Enabled. . . . . . . . : No
  WINS Proxy Enabled. . . . . . . . : No
  DNS Suffix Search List. . . . . . : ad.mydomain.com

Ethernet adapter Local Area Connection 2:

  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix . : 
  Description . . . . . . . . . . . : Intel(R) PRO/1000 EB Network Connection with I/O Acceleration #2
  Physical Address. . . . . . . . . : 00-15-17-60-07-95
  DHCP Enabled. . . . . . . . . . . : Yes
  Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

  Connection-specific DNS Suffix . : ad.mydomain.com
  Description . . . . . . . . . . . : Intel(R) PRO/1000 EB Network Connection with I/O Acceleration
  Physical Address. . . . . . . . . : 00-15-17-60-07-94
  DHCP Enabled. . . . . . . . . . . : No
  Autoconfiguration Enabled . . . . : Yes
  Link-local IPv6 Address . . . . . : fe80::64e8:5a20:efd9:b764%7(Preferred) 
  IPv4 Address. . . . . . . . . . . : 10.37.62.130(Preferred) 
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 10.37.62.254
  DHCPv6 IAID . . . . . . . . . . . : 234886423
  DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-20-DC-E9-51-00-15-17-60-07-94
  DNS Servers . . . . . . . . . . . : 10.37.5.4
                                      10.37.5.5
  NetBIOS over Tcpip. . . . . . . . : Enabled
  • Additional actions taken: one of the machines had a DHCP reservation although it had a static IP. I removed the reservation and created an exclusion instead, reran ipconfig /flushdns and ipconfir /registerdns but still no joy. – user1780242 Aug 10 '18 at 22:50

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.