DHCP/DNS Updates Not Working
Server 2003 R2 SP2
Windows XP SP3
We change our 2 DC's IP address from 10.10.50.0/24 to 10.50.0.0/20.
DC1: 10.50.0.5
DC2: 10.50.0.6
We changed the DHCP Scope and removed all the old DNS records for 10.10.50.0.
Now Dynamic DNS does not add/update anything on the 10.50.0.0 network.
Within DHCP I get the (pen icon - Dynamic Update Pending) and on the clients I get an EventID 11163.
Things I have checked;
- The IP of the DC point to themselves for DNS
- XP Machines are all working.
- Credentials in the DHCP use a user in the DNSUpdateProxy group. Password has not changed.
- Dynamic updates are enabled and told to update always
- Domain zone has only the two servers in the zone where also the reverse DNS only has the 2 servers in the list
- Can't find any rouge IP's in the zones of DNS
Interesting Findings :
1. When I create an A record, then go to the security tab and ADD the computer object with FC it will edit the record on thr next reboot or 'ipconfig /registerdns'. However when I remove the computer account from that A record it doesn't update.
2. On the client Event ID 11163 it has the following information;
Host Name : COMPUTERNAME
Primary Domain Suffix : domainame.local
DNS server list :
10.50.0.5, 10.50.0.6
Sent update to server : 10.1.1.1
IP Address(es):
10.50.0.112
I'm not sure what 10.1.1.1 even is. However when I changed the DNS server to another DNS server across the WAN I get this information;
Host Name : COMPUTERNAME
Primary Domain Suffix : domainame.local
DNS server list :
192.168.0.5, 192.168.0.6
Sent update to server : 192.1.1.1
IP Address(es):
10.50.0.112
It looks as if it's only taking the first octet of the IP and then apling 1.1.1 to it. Where it's getting it from I have NO idea.
Right now I 20 workstations in the office up and fully functional, except that DNS doesn't show their A or PTR record.
September 30th, 2010 4:09pm
I don't think the DHCP is the culprit. If you go here I am sure you'll be able to solve the problem yourself. Either
you changed the DC IP addresses but did not wait to have a complete replication or you forgot to change the Subnet on the Active Directory Site and Services.
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2010 6:19pm
Hi,
Thanks for the post.
Let's perform a Force Replication Between Domain Controllers.
http://technet.microsoft.com/en-us/library/cc776188(WS.10).aspx
Please also set Dynamic Updates to "secure and non secure". This will allow updates to take place.
Hope this helps.
MilesPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 1st, 2010 5:32am
Replication does work as I have used replmon to test and verify. Anything (DNS and AD Users and Computers) that is changed on this DC also gets replicated to the local DC and to the DC across the WAN. DNS has been changed to 'Nonsecure and Secure'
and is currently set to "To All DNS Servers in the AD domain ...." as the Zone Replication Scope.
The subnet has been added to Sites and Services and all the workstations along with both servers show the proper site.
I have rebooted a computer 3 times which within DNS shows a 10.50.0.112. however the computer's IP address is 10.50.0.132. I have run 'ipconfig /registerdns' from that machine and it doesn't show any errors in the Event Viewer, yet the DNS record does
not change on the server.
Free Windows Admin Tool Kit Click here and download it now
October 1st, 2010 10:33am
Here is something interesting. On the workstations under the TCP/IP Properties ~ Advanced ~ DNS Tab of the "Local Area Connection" if I add the domain name to
DNS suffix for this connection: and then check the bottom two boxes, the computer then updates DNS on the next reboot.
I'm not sure why this would matter since I'm pushing out Options 3, 6 & 15 through DHCP the computer should have this setting already.
October 1st, 2010 11:10am
- Credentials in the DHCP use a user in the DNSUpdateProxy group. Password has not changed.
You are supposed to add the computer account, not a user account.
Open the properties of "DnsUpdateProxy" Click on "Members" tab Click "Add" Click "Object Types" Enable the checkmark next to "Computers" Type the "Computername$" and hit enter
Delete some DHCP leases and force those users to request new IPs to get some traffic flowing.
Please update your information on here for diagnosis....
Throw these lines in a batch script, run it, and post it.
netsh dhcp server scope 10.50.0.0 show dnsconfig > C:\dhcpts.txt
netsh dhcp server scope 10.50.0.0 show iprange >> C:\dhcpts.txt
netsh dhcp server scope 10.50.0.0 show optionvalue >> C:\dhcpts.txt
At least that much, if anyone else can think of anything to add, please post the results in the text document.
Steve Kline
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Product Specialist
Microsoft Certified Network Product Specialist
This posting is "as is" without warranties and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
October 1st, 2010 12:06pm
CDIMP,
Have you set up a Windows account in your DHCP server (Advanced settings) so that the DHCP itself updates dynamically the DNS ?
http://technet.microsoft.com/en-us/library/cc753014(WS.10).aspx
October 1st, 2010 2:14pm
Hi,
If there is any update on this issue, please feel free to let us know.
We are looking forward to your reply.
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 3rd, 2010 9:37pm