Announcement

Collapse
No announcement yet.

Basic 2008 Active Directory Install

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Basic 2008 Active Directory Install

    Hey all,
    I would think this would be simple, bu tmaybe its me that is simple.

    I have done this twice now, and I am still getting tines of DCDiag problems.

    I am on a closed network 10.10.0.0/24
    I install server2008 enterprise
    I install the dns role, and make sure the server is entered
    I also have let dcpromo do it, it didn't help)
    then I add the ad ds role, and dcpromo
    I run dcdiag /test:dns, and I get this (Nslookup works fine);
    Starting test: DNS
    Test results for domain controllers:

    DC: first-dc.wsa.local
    Domain: wsa.local


    TEST: Basic (Basc)
    Warning: The AAAA record for this DC was not found

    TEST: Forwarders/Root hints (Forw)
    Error: Both root hints and forwarders are not configured.
    Please configure either forwarders or roothints

    TEST: Dynamic update (Dyn)
    Warning: Failed to delete the test record _dcdiag_test_record
    in zone wsa.local

    TEST: Records registration (RReg)
    Network Adapter
    [00000006] Intel(R) PRO/1000 MT Network Connection:
    Warning:
    Missing AAAA record at DNS server 10.10.0.10:
    first-dc.wsa.local

    Warning:
    Missing AAAA record at DNS server 10.10.0.10:
    gc._msdcs.wsa.local

    Warning: Record Registrations not found in some network adapters

    Summary of DNS test results:

    Auth Basc Forw Del Dyn RReg Ext
    __________________________________________________ _______________
    Domain: wsa.local
    first-dc PASS WARN FAIL PASS WARN WARN n/a

    ......................... wsa.local failed test DNS



    I am trully at a loss, what am I doing wrong??
    Yes, I did follow the Petri Howto article.

  • #2
    Re: Basic 2008 Active Directory Install

    The AAAA records are for the IPv6 address scheme. As default, TCP-IP v4 and v6 are installed.

    Do you actually have a problem? You could try disabling IPv6 on the network adapter. Has IPv4 got a static IP and has it been set to the correct gateway and DNS?

    Comment


    • #3
      Re: Basic 2008 Active Directory Install

      I have disabled IPV6 on the adapter, and it is a closed network, but I entered the gateway as it self anyway, no change. I can see the netlogon and sysvol shares, and navigate the directory, but the dns test still fails.

      do I have (or can I) to do something special to stop IPV6

      It is a closed network, I can enable it and configure it, but I haven't delt with configuring it at all yet.

      Comment


      • #4
        Re: Basic 2008 Active Directory Install

        Originally posted by blankmonkey View Post
        I have disabled IPV6 on the adapter, and it is a closed network, but I entered the gateway as it self anyway, no change. I can see the netlogon and sysvol shares, and navigate the directory, but the dns test still fails.

        do I have (or can I) to do something special to stop IPV6

        It is a closed network, I can enable it and configure it, but I haven't delt with configuring it at all yet.
        Can you post the results? As a gateway wasn' set, root hints hasn't been populated either by the looks of it.

        Comment


        • #5
          Re: Basic 2008 Active Directory Install

          I removed all the root hints because it can't talk to them anyway with the closed network. What would like me to post? There have been no changes since dcdiag /test:dns ran. Here is the ipconfig;
          C:\Users\Administrator>ipconfig/all

          Windows IP Configuration

          Host Name . . . . . . . . . . . . : first-dc
          Primary Dns Suffix . . . . . . . : wsa.local
          Node Type . . . . . . . . . . . . : Hybrid
          IP Routing Enabled. . . . . . . . : No
          WINS Proxy Enabled. . . . . . . . : No
          DNS Suffix Search List. . . . . . : wsa.local

          Ethernet adapter Local Area Connection:

          Connection-specific DNS Suffix . :
          Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
          Physical Address. . . . . . . . . : 00-0C-29-53-A1-44
          DHCP Enabled. . . . . . . . . . . : No
          Autoconfiguration Enabled . . . . : Yes
          IPv4 Address. . . . . . . . . . . : 10.10.0.10(Preferred)
          Subnet Mask . . . . . . . . . . . : 255.255.255.0
          Default Gateway . . . . . . . . . : 0.0.0.0
          10.10.0.1
          DNS Servers . . . . . . . . . . . : 10.10.0.10
          NetBIOS over Tcpip. . . . . . . . : Enabled

          Tunnel adapter Local Area Connection* 8:

          Media State . . . . . . . . . . . : Media disconnected
          Connection-specific DNS Suffix . :
          Description . . . . . . . . . . . : isatap.{611B3197-18E7-47AB-A1DC-A87C7CD14
          BCA}
          Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
          DHCP Enabled. . . . . . . . . . . : No
          Autoconfiguration Enabled . . . . : Yes

          Comment


          • #6
            Re: Basic 2008 Active Directory Install

            Two things:

            1. Why don't you enable TCP/IPv6 and see if it corrects the problem.

            2. When you say that you removed the root hint servers because it is a closed network, do you mean that internal clients will never need to resolve DNS records for external resources (web sites, etc.)?

            Comment


            • #7
              Re: Basic 2008 Active Directory Install

              Originally posted by joeqwerty View Post
              Two things:

              1. Why don't you enable TCP/IPv6 and see if it corrects the problem.

              2. When you say that you removed the root hint servers because it is a closed network, do you mean that internal clients will never need to resolve DNS records for external resources (web sites, etc.)?
              IPv6 was originally active but still worth a try.

              You haven't run the DCDIAG test since disabling IPv6.

              Comment


              • #8
                Re: Basic 2008 Active Directory Install

                How did you disable IPV6?
                Note that the tunnel mode is disabled only as follows:

                Add the following registry value (DWORD type) set to 0xFFFFFFFF:

                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Tcpip6\Parameters\DisabledComponents

                This method disables IPv6 on all your LAN interfaces, connections, and tunnel interfaces but does not disable the IPv6 loopback interface. You must restart the computer for this registry value to take effect.
                Caesar's cipher - 3

                ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

                SFX JNRS FC U6 MNGR

                Comment


                • #9
                  Re: Basic 2008 Active Directory Install

                  @joeqwerty
                  I have not dealt with IPV6 yet and do no know how to configure it. Although this is a test network, and if I had some instructions, I would not be apposed to it.
                  Yep, it is a test network, the First-dc is the only dns, and there will be no outbound traffic.

                  @Virtual
                  Sorry if I miscommunicated, IPV6 has been disabled through the network interface since I started, that is why the dcdaig is current, I haven't made any changes yet.

                  @L4ndy
                  I will make these changes and repost the results...

                  Comment


                  • #10
                    Re: Basic 2008 Active Directory Install

                    OK, it is starting to look better, but I am now getting 2 other errors;

                    C:\Users\Administrator>dcdiag /test:dns

                    Directory Server Diagnosis

                    Performing initial setup:
                    Trying to find home server...
                    Home Server = first-dc
                    * Identified AD Forest.
                    Done gathering initial info.

                    Doing initial required tests

                    Testing server: Default-First-Site-Name\FIRST-DC
                    Starting test: Connectivity
                    ......................... FIRST-DC passed test Connectivity

                    Doing primary tests

                    Testing server: Default-First-Site-Name\FIRST-DC

                    Starting test: DNS

                    DNS Tests are running and not hung. Please wait a few minutes...
                    ......................... FIRST-DC passed test DNS

                    Running partition tests on : ForestDnsZones

                    Running partition tests on : DomainDnsZones

                    Running partition tests on : Schema

                    Running partition tests on : Configuration

                    Running partition tests on : wsa

                    Running enterprise tests on : wsa.local
                    Starting test: DNS
                    Test results for domain controllers:

                    DC: first-dc.wsa.local
                    Domain: wsa.local


                    TEST: Forwarders/Root hints (Forw)
                    Error: Both root hints and forwarders are not configured.
                    Please configure either forwarders or roothints
                    I think I can ignore this one, but is there a way to clean it up, put in a fake forward or something?

                    TEST: Dynamic update (Dyn)
                    Warning: Failed to delete the test record _dcdiag_test_record

                    in zone wsa.local
                    This one bothers me

                    Summary of DNS test results:

                    Auth Basc Forw Del Dyn RReg Ext
                    __________________________________________________ _______________
                    Domain: wsa.local
                    first-dc PASS PASS FAIL PASS WARN PASS n/a

                    ......................... wsa.local failed test DNS

                    Comment


                    • #11
                      Re: Basic 2008 Active Directory Install

                      just add a couple of root rings, like c.root-servers.net

                      des DCDiag need to be able to REACH the forwarders, or just know that it's there ?
                      alternately you could just disregard the portion of this message, as yo know what's causing it and why
                      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                      Comment

                      Working...
                      X