Forum
Yeni kurduğum Windows 2008 R2 domaine additional dc olarak ekledim. Fakat makine login olacağı zaman Appliy Computer Settings en az 5 dakika bekliyor. DNS Server kendisi...
Merhaba,
DNS Server kendisi olduğu halde büyük ihtimalle yine problem DNS'de.Forward Lookup Zone'da kayıtların durumu nedir?Özellikle SRV,NS,SOA?Eğer ortamda başka bir dns varsa onu yazıp deneyebilirmisin?
Anladığım kadarıyla hem Forest Root üzerinde hemde Additional üzerinde DNS var.Additional'a Forest Root'u primary olarak yazıp Alternate'e kendisi yazıp dene bakalım.
Evet doğru hem Forest Root üzerinde hemde Additional üzerinde DNS var. Ama olması gereken bu değil mi. Hani bir sunucum durduğunda diğeri görevi alabilmesi için. Sizin dediğiniz gibi Additional'a Forest Root'u primary olarak yazıp Alternate'e kendisi yazıp denedim. Sorun düzeldi. Sanırım dns te bir sorun var. Ancak loglara baktığımda herhangi bir hata göremiyorum.SRV,NS,SOA kayıtlara baktım bir sorun göremedim. Ama açıkçası DNS konusunda pek uzman değilim....
Evet tahmin ettiğim gibi sorun Add. DC üzerindeki DNS'de.
Add. DC üzerindeki DNS'i kaldırıp tekrar kurmayı deneyin.Olmadı elle DNS'i kurduktan sonra Forest Root üzerindeki Zone'ları Add. DC'ye transfer edin.Yani Zone Transfer'i aktifleştirin.
DNS Additional DC ile birlikte kurulurken kuruldu. Ayrı olarak kaldırıp tekrar kurmak sorun yaratmaz mı. Elle kurarken DNS yi prymary DNS olarak mı kurmam gerekiyor.
DNS Additional DC ile birlikte kurulurken kuruldu. Ayrı olarak kaldırıp tekrar kurmak sorun yaratmaz mı. Elle kurarken DNS yi prymary DNS olarak mı kurmam gerekiyor.
Kaldırıp kurmak bir problem oluşturmaz zaten forest root üzerinde başka bir dns var.
Ok teşekkürler
Malesef durum düzelmiyor. Aldığım log hataları şöyle...
DNS Log
ACTIVE DIRECTORY LOG
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 11.01.2010 08:18:31
Event ID: 2088
Task Category: DS RPC Client
Level: Warning
Keywords: Classic
User: ANONYMOUS LOGON
Computer: ROOTDC.domain.local
Description:
Active Directory Domain Services could not use DNS to resolve the IP address of the source domain controller listed below. To maintain the consistency of Security groups, group policy, users and computers and their passwords, Active Directory Domain Services successfully replicated using the NetBIOS or fully qualified computer name of the source domain controller.
Invalid DNS configuration may be affecting other essential operations on member computers, domain controllers or application servers in this Active Directory Domain Services forest, including logon authentication or access to network resources.
You should immediately resolve this DNS configuration error so that this domain controller can resolve the IP address of the source domain controller using DNS.
Alternate server name:
sunucu
Failing DNS host name:
45178f6a-0ca4-4ae7-a082-d72977dc54fe._msdcs.domain.local
NOTE: By default, only up to 10 DNS failures are shown for any given 12 hour period, even if more than 10 failures occur. To log all individual failure events, set the following diagnostics registry value to 1:
Registry Path:
HKLM\System\CurrentControlSet\Services\NTDS\Diagnostics\22 DS RPC Client
User Action:
1) If the source domain controller is no longer functioning or its operating system has been reinstalled with a different computer name or NTDSDSA object GUID, remove the source domain controller's metadata with ntdsutil.exe, using the steps outlined in MSKB article 216498.
2) Confirm that the source domain controller is running Active Directory Domain Services and is accessible on the network by typing "net view \\<source DC name>" or "ping <source DC name>".
3) Verify that the source domain controller is using a valid DNS server for DNS services, and that the source domain controller's host record and CNAME record are correctly registered, using the DNS Enhanced version of DCDIAG.EXE available on http://www.microsoft.com/dns
dcdiag /test:dns
4) Verify that this destination domain controller is using a valid DNS server for DNS services, by running the DNS Enhanced version of DCDIAG.EXE command on the console of the destination domain controller, as follows:
dcdiag /test:dns
5) For further analysis of DNS error failures see KB 824449:
http://support.microsoft.com/?kbid=824449
Additional Data
Error value:
11004 The requested name is valid, but no data of the requested type was found.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-ActiveDirectory_DomainService" Guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" EventSourceName="NTDS General" />
<EventID Qualifiers="32768">2088</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>22</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-01-11T06:18:31.924875000Z" />
<EventRecordID>364</EventRecordID>
<Correlation />
<Execution ProcessID="520" ThreadID="2000" />
<Channel>Directory Service</Channel>
<Computer>ROOTDC.domain.local</Computer>
<Security UserID="S-1-5-7" />
</System>
<EventData>
<Data>sunucu</Data>
<Data>45178f6a-0ca4-4ae7-a082-d72977dc54fe._msdcs.domain.local</Data>
<Data>11004</Data>
<Data>The requested name is valid, but no data of the requested type was found.</Data>
<Data>System\CurrentControlSet\Services\NTDS\Diagnostics</Data>
<Data>22 DS RPC Client</Data>
</EventData>
</Event>
http://technet.microsoft.com/en-us/library/cc735842(WS.10).aspx