Sign in with
Sign up | Sign in
Your question

DC doesn't know its own domain (cont)

Last response: in Windows 2000/NT
Share
September 1, 2004 11:26:38 AM

Archived from groups: microsoft.public.win2000.dns (More info?)

Source: Usernv
Event Id: 1000

Windows cannot obtain the domain controller name for your
computer network. Return value (2146)

I just noticed that about two minutes before i get the
error mentioned above, I get a system log warning....

Source: W32time
Event ID: 63

The time service cannot provide secure (signed) time to
client 192.x.x.x because the attempt to validate its
computer account failed.

not sure if this is causing the problem or is a result of
the problem. Any help would be appreciated.

More about : domain cont

Anonymous
September 1, 2004 1:37:43 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:418401c4902f$b189d780$a501280a@phx.gbl,
dan <dan@integriguard.org> wrote their comments
Then Kevin replied below:
> Source: Usernv
> Event Id: 1000
>
> Windows cannot obtain the domain controller name for your
> computer network. Return value (2146)
>
> I just noticed that about two minutes before i get the
> error mentioned above, I get a system log warning....
>
> Source: W32time
> Event ID: 63
>
> The time service cannot provide secure (signed) time to
> client 192.x.x.x because the attempt to validate its
> computer account failed.
>
> not sure if this is causing the problem or is a result of
> the problem. Any help would be appreciated.

Post the ipconfig /all from your DC.

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
================================================
--
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
================================================
http://www.lonestaramerica.com/
================================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
================================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
================================================
September 1, 2004 1:37:44 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

>-----Original Message-----
>In news:418401c4902f$b189d780$a501280a@phx.gbl,
>dan <dan@integriguard.org> wrote their comments
>Then Kevin replied below:
>> Source: Usernv
>> Event Id: 1000
>>
>> Windows cannot obtain the domain controller name for
your
>> computer network. Return value (2146)
>>
>> I just noticed that about two minutes before i get the
>> error mentioned above, I get a system log warning....
>>
>> Source: W32time
>> Event ID: 63
>>
>> The time service cannot provide secure (signed) time to
>> client 192.x.x.x because the attempt to validate its
>> computer account failed.
>>
>> not sure if this is causing the problem or is a result
of
>> the problem. Any help would be appreciated.
>
>Post the ipconfig /all from your DC.
>
>--
>Best regards,
>Kevin D4 Dad Goodknecht Sr. [MVP]
>Hope This Helps
>================================================
>--
>When responding to posts, please "Reply to Group"
>via your newsreader so that others may learn and
>benefit from your issue, to respond directly to
>me remove the nospam. from my email address.
>================================================
>http://www.lonestaramerica.com/
>================================================
>Use Outlook Express?... Get OE_Quotefix:
>It will strip signature out and more
>http://home.in.tum.de/~jain/software/oe-quotefix/
>================================================
>Keep a back up of your OE settings and folders
>with OEBackup:
>http://www.oehelp.com/OEBackup/Default.aspx
>================================================
>
>
>.
>Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : PNEB-OA
Primary DNS Suffix . . . . . . . : mic.corp.org
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mic.corp.org
corp.org

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R)
PRO/100 Network Connection
Physical Address. . . . . . . . . : 00-B0-D0-AA-2E-
09
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1
DNS Servers . . . . . . . . . . . : 192.168.10.2
192.168.9.2
Related resources
Anonymous
September 1, 2004 3:48:54 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:42f001c49038$90b2c5e0$a601280a@phx.gbl,
dan <anonymous@discussions.microsoft.com> wrote their comments
Then Kevin replied below:
>> Windows 2000 IP Configuration
>
> Host Name . . . . . . . . . . . . : PNEB-OA
> Primary DNS Suffix . . . . . . . : mic.corp.org
> Node Type . . . . . . . . . . . . : Broadcast
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : mic.corp.org
> corp.org
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R)
> PRO/100 Network Connection
> Physical Address. . . . . . . . . :
> 00-B0-D0-AA-2E- 09
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.10.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.10.1
> DNS Servers . . . . . . . . . . . : 192.168.10.2
> 192.168.9.2

What is the DNS server at 192.168.9.2?
Both of these DNS servers must have a zone for the AD domain.

Also, is this a child of corp.org?
If it isn't you should consider modifying the DNS suffix search list by
unchecking "Append parent suffixes of the Primary DNS suffix"

> Source: Usernv
> Event Id: 1000
>
> Windows cannot obtain the domain controller name for your
> computer network. Return value (2146)

http://www.eventid.net/display.asp?eventid=1000&eventno...



For this:
> Source: W32time
> Event ID: 63
>
> The time service cannot provide secure (signed) time to
> client 192.x.x.x because the attempt to validate its
> computer account failed.
http://www.eventid.net/display.asp?eventid=63&eventno=7...


--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
================================================
--
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
================================================
http://www.lonestaramerica.com/
================================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
================================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
================================================
September 1, 2004 3:48:55 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

192.168.9.2 is a DNS server at another site. Same
domain. And yes, it is a child domain of corp.org.

>-----Original Message-----
>In news:42f001c49038$90b2c5e0$a601280a@phx.gbl,
>dan <anonymous@discussions.microsoft.com> wrote their
comments
>Then Kevin replied below:
>>> Windows 2000 IP Configuration
>>
>> Host Name . . . . . . . . . . . . : PNEB-OA
>> Primary DNS Suffix . . . . . . . : mic.corp.org
>> Node Type . . . . . . . . . . . . : Broadcast
>> IP Routing Enabled. . . . . . . . : No
>> WINS Proxy Enabled. . . . . . . . : No
>> DNS Suffix Search List. . . . . . : mic.corp.org
>> corp.org
>>
>> Ethernet adapter Local Area Connection:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R)
>> PRO/100 Network Connection
>> Physical Address. . . . . . . . . :
>> 00-B0-D0-AA-2E- 09
>> DHCP Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : 192.168.10.2
>> Subnet Mask . . . . . . . . . . . :
255.255.255.0
>> Default Gateway . . . . . . . . . : 192.168.10.1
>> DNS Servers . . . . . . . . . . . : 192.168.10.2
>> 192.168.9.2
>
>What is the DNS server at 192.168.9.2?
>Both of these DNS servers must have a zone for the AD
domain.
>
>Also, is this a child of corp.org?
>If it isn't you should consider modifying the DNS suffix
search list by
>unchecking "Append parent suffixes of the Primary DNS
suffix"
>
>> Source: Usernv
>> Event Id: 1000
>>
>> Windows cannot obtain the domain controller name for
your
>> computer network. Return value (2146)
>
>http://www.eventid.net/display.asp?
eventid=1000&eventno=1441&source=Userenv&phase=1
>
>
>
>For this:
>> Source: W32time
>> Event ID: 63
>>
>> The time service cannot provide secure (signed) time to
>> client 192.x.x.x because the attempt to validate its
>> computer account failed.
>http://www.eventid.net/display.asp?
eventid=63&eventno=792&source=w32time&phase=1
>
>
>--
>Best regards,
>Kevin D4 Dad Goodknecht Sr. [MVP]
>Hope This Helps
>================================================
>--
>When responding to posts, please "Reply to Group"
>via your newsreader so that others may learn and
>benefit from your issue, to respond directly to
>me remove the nospam. from my email address.
>================================================
>http://www.lonestaramerica.com/
>================================================
>Use Outlook Express?... Get OE_Quotefix:
>It will strip signature out and more
>http://home.in.tum.de/~jain/software/oe-quotefix/
>================================================
>Keep a back up of your OE settings and folders
>with OEBackup:
>http://www.oehelp.com/OEBackup/Default.aspx
>================================================
>
>
>.
>
Anonymous
September 1, 2004 10:45:20 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:01c301c49054$35fef350$a401280a@phx.gbl,
dan <anonymous@discussions.microsoft.com> made a post then I commented below
> 192.168.9.2 is a DNS server at another site. Same
> domain. And yes, it is a child domain of corp.org.


Does 192.168.9.2 have a copy of the mic.corp.org zone and updates are
allowed?

This part is important: Can you tell us if the SRV records exist under the
mic.corp.org zone?


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================
Anonymous
September 2, 2004 1:05:44 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

Somehow I'm missing bits of this thread.

What do we know? :) 

--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:urKnhVHkEHA.3612@TK2MSFTNGP12.phx.gbl...
> In news:01c301c49054$35fef350$a401280a@phx.gbl,
> dan <anonymous@discussions.microsoft.com> made a post then I commented
> below
>> 192.168.9.2 is a DNS server at another site. Same
>> domain. And yes, it is a child domain of corp.org.
>
>
> Does 192.168.9.2 have a copy of the mic.corp.org zone and updates are
> allowed?
>
> This part is important: Can you tell us if the SRV records exist under the
> mic.corp.org zone?
>
>
> --
> Regards,
> Ace
>
> Please direct all replies ONLY to the Microsoft public newsgroups
> so all can benefit.
>
> This posting is provided "AS-IS" with no warranties or guarantees
> and confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft Windows MVP - Windows Server - Directory Services
>
> Security Is Like An Onion, It Has Layers
> HAM AND EGGS: A day's work for a chicken;
> A lifetime commitment for a pig.
> --
> =================================
>
>
Anonymous
September 2, 2004 1:05:45 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:uLTy2gHkEHA.2544@TK2MSFTNGP10.phx.gbl,
Mark Renoden [MSFT] <markreno@online.microsoft.com> made a post then I
commented below
> Somehow I'm missing bits of this thread.
>
> What do we know? :) 
>
>
> "Ace Fekay [MVP]"
> <PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
> message news:urKnhVHkEHA.3612@TK2MSFTNGP12.phx.gbl...
>> In news:01c301c49054$35fef350$a401280a@phx.gbl,
>> dan <anonymous@discussions.microsoft.com> made a post then I
>> commented below
>>> 192.168.9.2 is a DNS server at another site. Same
>>> domain. And yes, it is a child domain of corp.org.
>>
>>
>> Does 192.168.9.2 have a copy of the mic.corp.org zone and updates are
>> allowed?
>>
>> This part is important: Can you tell us if the SRV records exist
>> under the mic.corp.org zone?
>>
>>
>> --
>> Regards,
>> Ace
>>
>> Please direct all replies ONLY to the Microsoft public newsgroups
>> so all can benefit.
>>
>> This posting is provided "AS-IS" with no warranties or guarantees
>> and confers no rights.


Hi Mark,

Sometimes the newsreaders do that!!

So far we got just the ipconfig /all. I didn't snip anything out of the
thread in this post so you can see it. I pasted the ipconfig /all below.
Apparently he started this new thread and may have not been able to find the
original thread. Hard to say. So far, it's either a mis-delegation with
incorrect forwarders, or if it is delegated, then pointing to the wrong DNS
that has the incorrect zone content, or firewall issue or a search suffix
issue. Don't have enough to go on concerning his topology yet other than the
ipconfig /all.

Here's his ipconfig /all. Were wondering what the192.168.9.2 DNS is since
its on another subnet, hence my thought about a firewall issue, delegation,
or lack of.
>
>
> .
> Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : PNEB-OA
Primary DNS Suffix . . . . . . . : mic.corp.org
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mic.corp.org
corp.org

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R)
PRO/100 Network Connection
Physical Address. . . . . . . . . : 00-B0-D0-AA-2E-09
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.10.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1
DNS Servers . . . . . . . . . . . : 192.168.10.2
192.168.9.2

Ace
Anonymous
September 2, 2004 3:57:27 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

Hi

Yeah the fact that a reboot allows it to come good certainly fits with the
DC trying to use the preferred server again and succeeding. Best guess
running with the DNS theme is:

1. DC stops using itself for DNS because of some failure. DNS logs might
lend a hand here.

2. DC fails over to the alternate DNS which doesn't have a valid zone or
zone data. If it is a DNS issue, we must be getting a response back from
192.168.9.2, just not a response that allows things to work. If 192.168.9.2
was unresponsive due to firewall/lack of existance etc, the DC should fail
back to itself for requests.

What happens if 192.168.9.2 is removed as an alternate? Must ensure that
DNS on the DC is healthy - logs.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:o HRU8nIkEHA.3944@tk2msftngp13.phx.gbl...
> In news:uLTy2gHkEHA.2544@TK2MSFTNGP10.phx.gbl,
> Mark Renoden [MSFT] <markreno@online.microsoft.com> made a post then I
> commented below
>> Somehow I'm missing bits of this thread.
>>
>> What do we know? :) 
>>
>>
>> "Ace Fekay [MVP]"
>> <PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
>> message news:urKnhVHkEHA.3612@TK2MSFTNGP12.phx.gbl...
>>> In news:01c301c49054$35fef350$a401280a@phx.gbl,
>>> dan <anonymous@discussions.microsoft.com> made a post then I
>>> commented below
>>>> 192.168.9.2 is a DNS server at another site. Same
>>>> domain. And yes, it is a child domain of corp.org.
>>>
>>>
>>> Does 192.168.9.2 have a copy of the mic.corp.org zone and updates are
>>> allowed?
>>>
>>> This part is important: Can you tell us if the SRV records exist
>>> under the mic.corp.org zone?
>>>
>>>
>>> --
>>> Regards,
>>> Ace
>>>
>>> Please direct all replies ONLY to the Microsoft public newsgroups
>>> so all can benefit.
>>>
>>> This posting is provided "AS-IS" with no warranties or guarantees
>>> and confers no rights.
>
>
> Hi Mark,
>
> Sometimes the newsreaders do that!!
>
> So far we got just the ipconfig /all. I didn't snip anything out of the
> thread in this post so you can see it. I pasted the ipconfig /all below.
> Apparently he started this new thread and may have not been able to find
> the
> original thread. Hard to say. So far, it's either a mis-delegation with
> incorrect forwarders, or if it is delegated, then pointing to the wrong
> DNS
> that has the incorrect zone content, or firewall issue or a search suffix
> issue. Don't have enough to go on concerning his topology yet other than
> the
> ipconfig /all.
>
> Here's his ipconfig /all. Were wondering what the192.168.9.2 DNS is since
> its on another subnet, hence my thought about a firewall issue,
> delegation,
> or lack of.
>>
>>
>> .
>> Windows 2000 IP Configuration
>
> Host Name . . . . . . . . . . . . : PNEB-OA
> Primary DNS Suffix . . . . . . . : mic.corp.org
> Node Type . . . . . . . . . . . . : Broadcast
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : mic.corp.org
> corp.org
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R)
> PRO/100 Network Connection
> Physical Address. . . . . . . . . : 00-B0-D0-AA-2E-09
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.10.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.10.1
> DNS Servers . . . . . . . . . . . : 192.168.10.2
> 192.168.9.2
>
> Ace
>
>
Anonymous
September 2, 2004 3:57:28 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:uhwvyAJkEHA.3536@TK2MSFTNGP12.phx.gbl,
Mark Renoden [MSFT] <markreno@online.microsoft.com> made a post then I
commented below
> Hi
>
> Yeah the fact that a reboot allows it to come good certainly fits
> with the DC trying to use the preferred server again and succeeding.
> Best guess running with the DNS theme is:
>
> 1. DC stops using itself for DNS because of some failure. DNS logs
> might lend a hand here.
>
> 2. DC fails over to the alternate DNS which doesn't have a valid zone
> or zone data. If it is a DNS issue, we must be getting a response
> back from 192.168.9.2, just not a response that allows things to
> work. If 192.168.9.2 was unresponsive due to firewall/lack of
> existance etc, the DC should fail back to itself for requests.
>
> What happens if 192.168.9.2 is removed as an alternate? Must ensure
> that DNS on the DC is healthy - logs.
>
> Kind regards
>

I hope we here back from Dan with his responses. It would be good to know
more topology and config info and what's in the logs.

Ace
September 2, 2004 3:57:29 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

192.168.9.2 has an Active Directory integrated zone of
mic.corp.org that allows transfers to 192.168.10.2 and
vice versa. The srv record does exist.
Sadly enough, I don't have dns logging enabled. I shall
turn that on.
In tcp/ip properties, should I have just the servers
address for dns or have both servers. Right now i have
both addresses for both servers.

>-----Original Message-----
>In news:uhwvyAJkEHA.3536@TK2MSFTNGP12.phx.gbl,
>Mark Renoden [MSFT] <markreno@online.microsoft.com> made
a post then I
>commented below
>> Hi
>>
>> Yeah the fact that a reboot allows it to come good
certainly fits
>> with the DC trying to use the preferred server again
and succeeding.
>> Best guess running with the DNS theme is:
>>
>> 1. DC stops using itself for DNS because of some
failure. DNS logs
>> might lend a hand here.
>>
>> 2. DC fails over to the alternate DNS which doesn't
have a valid zone
>> or zone data. If it is a DNS issue, we must be getting
a response
>> back from 192.168.9.2, just not a response that allows
things to
>> work. If 192.168.9.2 was unresponsive due to
firewall/lack of
>> existance etc, the DC should fail back to itself for
requests.
>>
>> What happens if 192.168.9.2 is removed as an
alternate? Must ensure
>> that DNS on the DC is healthy - logs.
>>
>> Kind regards
>>
>
>I hope we here back from Dan with his responses. It would
be good to know
>more topology and config info and what's in the logs.
>
>Ace
>
>
>.
>
Anonymous
September 2, 2004 11:11:40 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:514101c49111$87c4cdf0$a301280a@phx.gbl,
dan <anonymous@discussions.microsoft.com> made a post then I commented below
> 192.168.9.2 has an Active Directory integrated zone of
> mic.corp.org that allows transfers to 192.168.10.2 and
> vice versa. The srv record does exist.
> Sadly enough, I don't have dns logging enabled. I shall
> turn that on.
> In tcp/ip properties, should I have just the servers
> address for dns or have both servers. Right now i have
> both addresses for both servers.
>

Thank you. The lack of SRV records is what is causing the whole thing. But
that is just a symptom of a greater problem because those records normally
get created automatically during the dynamic update process. Back to your
config. Your zone name is and spelled exactly as mic.corp.org. on your DNS
server, 192.168.9.2.

Does the zone have updates allowed?

I would immediately remove the 192.168.10.2 if that is truly a secondary
zone, because when updates are sent to that, it will read the MNAME in the
zone record and send it there, which in your case is actually 192.168.9.2
(the master), so it will be looping.


Ace
Anonymous
September 3, 2004 12:45:46 PM

Archived from groups: microsoft.public.win2000.dns (More info?)

Hi Dan

I was more referring to DNS specific event logs rather than debug logging.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"dan" <anonymous@discussions.microsoft.com> wrote in message
news:514101c49111$87c4cdf0$a301280a@phx.gbl...
>
> 192.168.9.2 has an Active Directory integrated zone of
> mic.corp.org that allows transfers to 192.168.10.2 and
> vice versa. The srv record does exist.
> Sadly enough, I don't have dns logging enabled. I shall
> turn that on.
> In tcp/ip properties, should I have just the servers
> address for dns or have both servers. Right now i have
> both addresses for both servers.
>
>>-----Original Message-----
>>In news:uhwvyAJkEHA.3536@TK2MSFTNGP12.phx.gbl,
>>Mark Renoden [MSFT] <markreno@online.microsoft.com> made
> a post then I
>>commented below
>>> Hi
>>>
>>> Yeah the fact that a reboot allows it to come good
> certainly fits
>>> with the DC trying to use the preferred server again
> and succeeding.
>>> Best guess running with the DNS theme is:
>>>
>>> 1. DC stops using itself for DNS because of some
> failure. DNS logs
>>> might lend a hand here.
>>>
>>> 2. DC fails over to the alternate DNS which doesn't
> have a valid zone
>>> or zone data. If it is a DNS issue, we must be getting
> a response
>>> back from 192.168.9.2, just not a response that allows
> things to
>>> work. If 192.168.9.2 was unresponsive due to
> firewall/lack of
>>> existance etc, the DC should fail back to itself for
> requests.
>>>
>>> What happens if 192.168.9.2 is removed as an
> alternate? Must ensure
>>> that DNS on the DC is healthy - logs.
>>>
>>> Kind regards
>>>
>>
>>I hope we here back from Dan with his responses. It would
> be good to know
>>more topology and config info and what's in the logs.
>>
>>Ace
>>
>>
>>.
>>
!