+1 It will fail and warn in weird ways depending upon how you have the security set up on dynamic registration.
-----Original Message----- From: Steve Kradel [mailto:[email protected]] Sent: Thursday, December 13, 2012 4:02 PM To: NT System Admin Issues Subject: Re: DNS/Replication broken after MS updates? You would see a bunch of errors in the Directory Service log if replication were actually busted. IME it's normal for the dcdiag DNS tests (and dcpromo, often) to complain about DNS delegations, even in a perfectly healthy environment. --Steve On Thu, Dec 13, 2012 at 2:52 PM, Phil Hershey <[email protected]> wrote: > Our DCs are set to install MS updates automatically, and apparently > yesterday morning they did. Now replication is busted. DCDIAG DNS > test finishes with: > > Summary of DNS test results: > > > Auth Basc Forw Del Dyn > RReg Ext > > _________________________________________________________________ > Domain: agia.in > > dc-ca1 PASS PASS PASS FAIL PASS > PASS n/a > mail-dc2 PASS PASS PASS FAIL PASS > FAIL n/a > mail-dc5 PASS PASS PASS FAIL PASS > PASS n/a > dc-az1 PASS PASS PASS FAIL PASS > PASS n/a > mail-dc3 PASS PASS PASS FAIL PASS > PASS n/a > mail-dc4 PASS PASS PASS FAIL PASS > PASS n/a > > ......................... agia.in failed test DNS > > Not good. READMIN SYNCALL passes all error out with RPC Server is > unavailable. Of course the RPC Server service is up and running on > all the DCs. > > Checking the DNS event log shows a 4014 error that's empty, of course. > Plus a few event 4521's showing rejected DNS packets from external > sources. > > Any chance the MS updates from yesterday caused this? It seems mighty > coincidental. > > Thanks. > > > > Philip Hershey > AGIA Insurance Services > Carpinteria, CA > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
