Troubleshooting Windows 2000 DNS
Sample chapter from the Windows 2000 Resource Kit. Discusses new features of Windows 2000 DNS, such as Active Directory integration, multimaster replication, dynamic and secure dynamic update, and aging and scavenging. Also discusses integration with WINS and interoperability
with other DNS servers.
Troubleshooting Windows 2000 Domain Name System Dynamic Update Problems
Microsoft Knowledge Base Article: 287156 - This article describes the dynamic update process that is used between Windows 2000-based client computers and Windows 2000-based Domain Name System (DNS) servers. The typical points of failure in the update process and how to diagnose them
and Troubleshooting DNS in Windows 2000
Microsoft has released a free training course
titled "Understanding and Troubleshooting DNS
in Windows 2000" that is available for
download as a compressed file that contains a CD
ISO image and instructions about how to create a CD
from the image. This course provides in-depth
discussion of Domain Name Service (DNS) as implemented
in Windows 2000, with emphasis on best
practices for installing, maintaining, and
troubleshooting the DNS Client service and DNS
Server service in Windows 2000 networking and
Active Directory directory service
environments. Source: Microsoft.com
Microsoft Windows 2000: Domain Name System (DNS) Troubleshooter
This troubleshooter is designed to help you resolve problems with the Domain Name System, which maps domain name addresses (such as www.microsoft.com) to IP addresses. Select one of the problems described above, and this troubleshooter will recommend troubleshooting steps that help
solve the problem as quickly as possible.
Description of the DNSLint Utility
Microsoft Knowledge Base Article DNSLint is a Microsoft Windows utility that helps you to diagnose common DNS name resolution issues. This utility is available for download from the Microsoft Download Center: Download DNSLint now
Microsoft Windows: Using the DNSLint Utility
This WebCast will discuss DNSLint, a new utility in Microsoft
Windows that helps you troubleshoot DNS issues. DNSLint has
three primary functions that verify Domain Name System (DNS)
records and generate an HTML report. This session focuses on how
DNSLint functions and how you can use it.
Replacing Root Hints with the Cache.dns File
Microsoft Knowledge Base Article: 249868 - You may experience one or more of the following
symptoms: The DNS server is unable to resolve names for which it
is not authoritative; There are no servers listed on the DNS
server Root Hints tab; The servers listed on the Root
Hints tab do not match the Cache.dns file in the %systemroot%\system32\dns
folder ; When you replace the Cache.dns file in the %systemroot%\system32\dns
folder, it does not update the root hints listed in the DNS
A Windows 2000 Client Does Not Register the Primary Domain Name in Some Situations
Microsoft Knowledge Base Article: 308441 - A Windows 2000-based client does not register the Domain Name System (DNS) primary domain name if the client is configured to perform updates with both the primary domain name and the adapter-specific domain name. This problem occurs if
the the client's Dynamic Host Configuration Protocol (DHCP)
server is configured to perform updates on behalf of the client
always. In this configuration, the client registers only its
adapter-specific domain name.
Access Violation in Dns.exe When You Attempt to Use Unicode Characters
Microsoft Knowledge Base Article: 258073 - When you attempt to use zone files with Unicode strings, the DNS Server service may stop and one of the following error messages may be displayed
Cannot Clear the Cache on a DNS Server
Microsoft Knowledge Base Article: 257828 - When you attempt to clear the Domain Name System (DNS) cache, you may receive an error message
Cannot Start Windows 2000 with a Large Number of DNS Zones
Microsoft Knowledge Base Article: 259930 - When you try to start your computer after you have added several thousand DNS zones, you may receive the following error
file is missing or corrupt. This problem can occur if the
System hive is equal to or greater than 16 megabytes (MB). If
the System hive is full, you may not be able to start your
Computer Stops Responding During Windows 2000 DNS Query
Microsoft Knowledge Base Article: 311309 - During DNS name resolution on your client computer, your computer may stop responding (hang), and this may happen in multiple processes including
.dns Files Remain in the DNS Folder After Active Directory Is Installed
Microsoft Knowledge Base Article: 231359 - After you install Active Directory and integrate the DNS records into Active Directory, .dns files remain in the %SystemRoot%\System32\Dns folder. This occurs with both primary and secondary zones.
DNS Caches Last Negative Response Returned on Multihomed Server
Microsoft Knowledge Base Article: 263876 - When you query a DomainNameService (DNS)namefrom a multihomed Windows 2000-based computer that is connected to disjoint networks, you may receive a negativenameresponse for an existing name.
DNS Does Not Send Name Query to WINS with CNAME Records
Microsoft Knowledge Base Article: 254541 - When the host name that is associated with an alias in DNS (cname) does not have an address record, DNS terminates the query. In Microsoft Windows NT 4.0, DNS attempts to resolve the host name with WINS.
DNS Domain Setting Unchanged After Promotion to Domain Controller
Microsoft Knowledge Base Article: 223347 - After upgrading a member server to a domain controller (DC) in a new domain, the original DNS zone set on the computer is unchanged and must be reset manually in the DNS properties for the adapter.
DNS Dynamic Updates May Not Work
Microsoft Knowledge Base Article: 262188 - You may notice that Dynamic DNS updates to a Windows 2000 DNS server silently fail to update an existing host record. This problem can occur in an Active Directory integrated DNS environment in which scavenging is enabled for the DNS zone
DNS Manager May Damage Certain SOA Values in RNAME Field
Microsoft Knowledge Base Article: 279280 - If you use an administrative e-mail address that contains a period (or dot) in the name part of the address, the address may not be kept in the correct format when it is stored in the SOA record of a DNS zone.
DNS Manager Monitor Test May Not Work on a Non-Domain Controller DNS Server
Microsoft Knowledge Base Article: 275525 - When you perform a manual test for a simple query on a Domain Name System (DNS) server that is not a domain controller, the test may not succeed; you may receive a "name resolution failed" result from the
DNS Name Resolution May Not Work for the FTP GUID
Microsoft Knowledge Base Article: 252818 - Windows 2000 Globally Unique Identifiers (GUIDs) are available for querying specific Domain Name System (DNS) types. With some GUIDs, including the FTP GUID, host ne resolution may not succeed.
DNS Server Does Not Start with DBCS Domain Names
Microsoft Knowledge Base Article: 258072 - A Windows 2000-based Domain Name System (DNS) server that is integrated with Active Directory may not start if you are using a double-byte character set (DBCS) domain name. When this issue occurs, you may see an error messages
DNS Server Generates Event 4011
Microsoft Knowledge Base Article: 252695 - In certain rare cases, you may find the following entries in the Event log on a Windows 2000-based Active Directory-integrated DNS
server: Event ID: 4011 The DNS server was
unable to add or write an update of domain name _ldap in zone name.com
to the Active Directory. OR The DNS server was unable to
add or write an update of domain name _gc in zone name.com
to the Active Directory. OR The DNS server was unable to add or
write an update of domain name gc in zone name.com to the
DNS Server Monitoring Tests Do Not Succeed
Microsoft Knowledge Base Article: 258263 - Even though a Domain Name System (DNS) server is configured correctly (forwarders, root hints, and so on), monitoring tests performed on a non-domain controller DNS server may not succeed.
DNS Server Problem When Dynamic Updates Occur with Conflicting Entries
Microsoft Knowledge Base Article: 258019 - Your Windows 2000-based Domain Name System (DNS) server may generate an "access violation" error and cease to function after it receives a dynamic update.
DNS Server Stops Using Round Robin for Host Name Resolution
Microsoft Knowledge Base Article Q177883 - After you install Windows 2000 DNS or after you apply the latest Dns.exe, your Microsoft Windows NT Domain Name Service (DNS) server no longer responds to queries in a round robin
DNS Service Memory Leak
Microsoft Knowledge Base Article: 258282 - The amount of memory being used by Dns.exe may continually grow and may not plateau, or memory may not be returned to the system over time. The rate of growth of the memory leak depends on the number of
queries the server receives per hour.
DNS Startup Is Longer When You Use Active Directory Integrated Zones
Microsoft Knowledge Base Article: 323643 - When you are using the Windows 2000 DNS service and you are using Active Directory integrated zones, the DNS service may start slower than a DNS service that is configured to use a standard primary zone.
DNS Site Records Are Not Properly Removed After Dcpromo
Microsoft Knowledge Base Article: 259435 - When you create a new site, you may have a situation where at the time you created the site it did not contain domain controllers. The following event is displayed in Event Viewer:
DNS Zone Transfer Between Windows 2000 and Windows NT 4.0 Fails
Microsoft Knowledge Base Article: 203009 - When you try to perform DNS zone transfers between Windows 2000 DNS servers and a previous version of Windows NT Server with DNS service installed, you may encounter certain system errors. Restarting the server has no effect.
Dr Watson Error Message in Services.exe When You Use IPconfig.exe with the /displaydns Switch
Microsoft Knowledge Base Article: 262637 - When you run Ipconfig.exe with the display DNS switch (/displaydns), if the cache has a large number of entries, Services.exe may generate a Dr.Watson error message. This symptom has been noted on configurations with DomainnameResolution
Dynamic DNS Updates Do Not Work if the DHCP Client Service Stops
Microsoft Knowledge Base Article: 264539 - The client computer does not send dynamic Domain Name System (DNS) updates to the DNS server even though the Register this connection's address in DNS option is selected
Dynamic Update Does Not Work Using BIND DNS Forwarder
Microsoft Knowledge Base Article: 257462 - If you are using a BIND-based Domain Name System (DNS) server as forwarder on a Windows 2000-based DNS server, you may receive the following error message when a client tries to dynamically update DNS records:
Dynamic DNS Update Option Sent to DHCP Server Even If Disabled Globally
Microsoft Knowledge Base Article: 263550 - Windows 2000-based clients that are using Dynamic Host Configuration Protocol (DHCP) may not receive IP addresses from non-Microsoft DHCP servers that do not recognize dynamic DNS update option 81. Disabling this option globally does not
Dynamic Updates Do Not Work with New DNS Server
Microsoft Knowledge Base Article: 301552 - After you create a new DNS server and change all of the information on your clients and servers to reflect the new DNS server name, the clients and servers may still dynamically register with the old
Error Message When You Use the "IPCONFIG /REGISTERDNS" Command
Microsoft Knowledge Base Article: 266319 - When you attempt to use the ipconfig /registerdns command to register a computer's Domain Name System (DNS) records, you may receive the following error message: Error: The system cannot find the file specified.
: Refreshing DNS names
Event ID 6524 with DNS Incremental Zone Transfer Problem
Microsoft Knowledge Base Article: 260021 - Incremental zone transfers that are requested by Windows 2000-based secondary servers from a Bind primary may not succeed. When this occurs, event ID 6524 is recorded in the DNS event log.
Extraneous DNS Queries Generate Network Overhead
Microsoft Knowledge Base Article: 295165 - If a Domain Name System (DNS - client computer is connected to the DNS server by using an Integrated Services Digital Network (ISDN - link and the ISDN line is brought up in an unexpected manner, queries that should be resolved from the client
Global.exe Does Not Recognize DNS Domain Name
Microsoft Knowledge Base Article: 255086 - If you attempt to use the Global.exe program with a DNS domain name, you may receive the following error message:
Invalid Characters in DNS Queries
Microsoft Knowledge Base Article: 258002 - Invalid characters may appear in Domain Name System (DNS) queries when you use some of the Microsoft Management Console (MMC) snap-ins. This does not affect the operation, but it may cause extra network traffic.
Invalid DNS Records Are Not Removed
Microsoft Knowledge Base Article: 262289 - When you create a site that does not have a domain controller, domain controllers from other sites are assigned to cover the site. After you install a domain controller at this site, the Domain Name System (DNS) records that point to
Net Logon Dynamic DNS Registration Functionality Changes After Installing Windows 2000 SP1
Microsoft Knowledge Base Article: 280439 - After you install Window 2000 Service Pack 1 (SP1), when you use the Net Logon service, the dynamic Domain Name System (DNS) registration functionality may not work as
No DNS Name Resolution If DHCP Client Service Is Not Running
Microsoft Knowledge Base Article: 268674 - When you try to resolve a host name using Domain Name Service (DNS), the attempt is unsuccessful. Communication by Internet Protocol (IP) address (even to the DNS server) and the Nslookup utility against the DNS server both work correctly.
Routing and Remote Access IP Addresses Register in DNS
Microsoft Knowledge Base Article: 289735 - When DNS queries for the domain name or the domain controller's fully qualified domain name (FQDN) are sent to a Windows 2000 domain controller that is running Routing and Remote Access, the domain name or FQDN for the domain controller is
resolved to an Internet protocol (IP) address that is used by
Routing and Remote Access.
SendPort DNS Registry Key Does Not Work as Expected
Microsoft Knowledge Base Article: 260186 - When you upgrade your Microsoft Windows NT 4.0-based computer that is running Domain Name Service (DNS) to Windows 2000, you may experience name resolution issues.
The Dsstore Tool May Not Work If the NetBIOS Name and the DNS Domain Name Are Different
Microsoft Knowledge Base Article: 280122 - When you use several of the available commands that are included in the Dsstore tool (Dsstore.exe -, such as
dsstore DC=MyDomain,DC=com -addcrl "My Certificate
Authority.crl" "My Certificate Authority"
MyDomain-DC-01 (updated 6/20/2001)
The DNS Client Service Does Not Revert to Using the First Server in the List
Microsoft Knowledge Base Article: 286834 - The Windows 2000 Domain Name System (DNS - Client service (Dnscache - follows a certain algorithm when it decides the order in which to use the DNS servers that are configured in the TCP/IP properties.
The Host's "A" Record Is Registered in DNS After You Choose Not to Register the Connection's Address
Microsoft Knowledge Base Article In Windows 2000, if you clear the Register this connection's address in DNS check box under Advanced TCP/IP Settings for a network interface, the IP address may register an A record for the host name in its primary DNS suffix zone.
The Hosts File Does Not Reflect Changes If You Alter It by Renaming or Copying
Microsoft Knowledge Base Article: 283092 - If you create a Hosts file in another folder or with a different name and you then copy or rename the file to %SystemRoot%\System32\Drivers\Etc\Hosts, you may not be able to resolve host names in the new Hosts file.
Unable to Prevent DNS Zone Administrator from Creating New Zones
Microsoft Knowledge Base Article: 256643 - The Windows 2000 DNS White Paper describes how to delegate administration of a zone to a DNS administrator so that a DNS administrator can administer a specific zone but is not able to modify other configured zones.
Unnecessary DNS Query for
Microsoft Knowledge Base Article: 272020 - If your computer is connected to a network, but it is not part of a domain, your computer issues a DNS query for
Windows 2000 DHCP Server Gives Incorrect Settings for the Default Gateway or the DNS Server
Microsoft Knowledge Base Article: 263217 - In Microsoft Windows 2000 Server, Windows 2000 Advanced Server, and Windows 2000 Professional, you may experience the following
Windows 2000 DNS Boot File Can Be Named Boot or Boot.dns
Microsoft Knowledge Base Article: 240088 - Windows 2000 can load the Directory Naming Service (DNS) boot file from a text file. This makes moving zone files from a third-party DNS server or a Microsoft Windows NT DNS server easy. The boot file's default name in Windows 2000 is Boot
the file name has no extension). This file may have been named
Boot.dns previously, so Windows 2000 loads either of these
files, but saves the file only as Boot (with no extension).
Windows 2000 May Send Unexpected DNS Request
Microsoft Knowledge Base Article: 263091 - A Microsoft Windows 2000-based domain controller may unexpectedly send Domain Name System (DNS) registration requests or queries for SRV records to an external DNS server. Other symptoms may
Windows 2000 DNS Server May Not Start with Many Reverse Lookup Zones
Microsoft Knowledge Base Article: 270030 - If you have a Windows 2000 Domain Name System (DNS) environment with many DNS reverse lookup zones, the DNS server service may be slow to start or may not start completely.
If you look at a network trace, you see that Netlogon
continually attempts to reregister the dynamic DNS SRV records
for a particular Windows 2000-based domain controller
Windows 2000 Professional Cannot Join Windows NT 4.0 Domain with Third-Party DNS Server
Microsoft Knowledge Base Article: 260231 - A computer that is running Windows 2000 Professional cannot join a Microsoft Windows NT 4.0-based domain using a third-party Domain Name System (DNS) server if the SRV resource records are not supported.
Zone Transfer Information Lost With Windows 2000 Active-Directory Integrated DNS
Microsoft Knowledge Base Article: 272089
- Zone Transfer information for any Active Directory-integrated Domain Name System (DNS) zones that begin with the underscore (_) character is lost after you reboot the domain controller.