<div>On Tue, Jan 3, 2012 at 4:00 AM, Melbinger Christian <span dir="ltr"><<a href="mailto:Christian.Melbinger@wienit.at">Christian.Melbinger@wienit.at</a>></span> wrote:</div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="DE" link="blue" vlink="purple"><div><p class="MsoNormal"><span lang="DE-AT" style="font-size:10.0pt;line-height:115%">Hi<u></u><u></u></span></p><p class="MsoNormal"><span lang="DE-AT" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%">My company moved to a 2008R2 Domain Controller environment. Now I see the following message in the windows log:<u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Title</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: This domain controller must register its correct IP addresses with the DNS server<u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Severity</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: Error<u></u><u></u></span></p><p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Category</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: Configuration<u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Issue</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: The Domain Name System (DNS) host resource records for this domain controller's fully qualified domain name currently map to the IP addresses that do not belong to this domain controller. The invalid IP addresses are 10.1.1.1; 10.2.2.2.<u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Impact</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: Other member computers and domain controllers in the domain or forest might not be able to locate this domain controller. This domain controller will not be able to provide a full suite of services.<u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Resolution</span></b><span lang="EN-US" style="font-size:10.0pt;line-height:115%">: Ensure that the DNS Client service on this domain controller is configured and able to register valid host resource records with an authoritative DNS server for the domain.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%">More information about this best practice and detailed resolution procedures: <a href="http://go.microsoft.com/fwlink/?LinkId=131229" target="_blank">http://go.microsoft.com/fwlink/?LinkId=131229</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:10.0pt;line-height:115%">All Domain Controllers have zone updates rights on the master dns server, and according to the logfile updating zones works.<u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:10.0pt;line-height:115%">My DNS-Servers are running BIND 9.7.3-P3.<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:10.0pt;line-height:115%">So this is presumably not a problem of the bind servers themselves, but still, does anyone have an idea how to get rid of the error messages?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Anyone know the checkbox to unset? I didn’t find one…<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%">With regards<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%">Christian Melbinger<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;line-height:115%"><u></u> <u></u></span></p><p class="MsoNormal" style="line-height:normal">
<span style="font-size:9.0pt;color:gray">---<u></u><u></u></span></p><p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray">Ing. Christian Melbinger<u></u><u></u></span></p><p class="MsoNormal" style="line-height:normal">
<span style="font-size:9.0pt;color:gray">Netzwerk & Security<u></u><u></u></span></p><p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray"><u></u> <u></u></span></p><p class="MsoNormal" style="line-height:normal">
<span style="font-size:9.0pt;color:gray">WienIT EDV Dienstleistungsgesellschaft mbH & Co KG<u></u><u></u></span></p><p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray">A-1030 Wien, Thomas-Klestil-Platz 6<u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray">tel: <a href="tel:%2B43%20%281%29%2090405%2047188" value="+4319040547188" target="_blank">+43 (1) 90405 47188</a><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray">fax: <a href="tel:%2B43%20%281%29%2090405%2088%2047188" value="+431904058847188" target="_blank">+43 (1) 90405 88 47188</a><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:normal"><span style="font-size:9.0pt;color:gray">mailto:<a href="mailto:christian.melbinger@wienit.at" target="_blank">christian.melbinger@wienit.at</a><u></u><u></u></span></p><p class="MsoNormal">
<span lang="DE-AT"><u></u> <u></u></span></p></div><span style="font-family:Verdana;font-size:11">____________________________________________________________________________<br>
WienIT EDV Dienstleistungsgesellschaft mbH & Co KG, A-1030 Wien, Thomas-Klestil-Platz 6,<br>
FN 255974h, Handelsgericht Wien, DVR: 2109667, UID-Nr. ATU61260824<br>
Persönlich haftender Gesellschafter:<br>
WienIT EDV Dienstleistungsgesellschaft mbH, A-1030 Wien, Thomas-Klestil-Platz 6,<br>
FN 255649f, Handelsgericht Wien, UID-Nr. ATU61296118<br>
</span>
</div><br>_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><br>I'm just going to throw out a few ideas, not sure any or all of them will get you in the right direction...but I had significant issues with DCs and dynamic updates following a migration from AD integrated DNS to BIND.<div>
<br></div><div><br>What A records map to those IP addresses listed (10.1.1.1, 10.2.2.2)? <div><br></div><div>Are there any "same as zone" records that point to your DC IPs? (this is common if DNS is AD integrated) </div>
<div><br></div><div>Do you see in the Event Viewer on the DC that it is successfully registering the A, PTR and SRV records? (not sure what log this is in, been a little while since I looked last).</div><div><br></div><div>
I know you said it was the case, but your BIND config has one of the following options set?</div><div><div> - allow-update { address_match_list }; <-- If the DC is pointing to the master BIND server</div><div> - allow-update-forwarding { address_match_list }; <-- if the DC is pointing to the slave BIND server</div>
<div><br></div><div>What happens if you issue the ipconfig /registerdns command from the DCs?</div><br><div><br></div><div>- Will</div><div><br></div><div><br></div><div><br></div><br>
</div></div>