RE: [ActiveDir] DNS/prisoner.iana.org Error

[Deji Akomolafe]

This is telling you that your 192.168 subnet does not have a reverse zone. The 192.168/16 block belongs to IANA (it's essentially "reserved", along with other blocks). If your DNS server tries to reverse resolve anything in that range, and you don't have an authoritative zone, then it goes out and asks. The IANA servers will tell it to go to hell/blackhole/prison/somewhere.     Sincerely, D�j� Ak�m�l�f�, MCSE MCSA MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon From: Noah Eiger Sent: Mon 9/20/2004 1:00 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] DNS/prisoner.iana.org Error Hi –   I have a single-DC domain that keeps getting the following error in the Event Log. Web searches are somewhat inconclusive about what this means. The DC runs DNS, which is AD Integrated and forwards to a public, non-NT DNS server.   Event Type:       Warning Event Source:    LSASRV Event Category: SPNEGO (Negotiator) Event ID:           40961 Date:                9/20/2004 Time:                12:01:24 PM User:                N/A Computer:         SERVER1 Description: The Security System could not establish a secured connection with the server DNS/prisoner.iana.org.  No authentication protocol was available.   For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp   Any ideas?   -- nme List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/