DNS and AD collapsing every 35 hours.
Windows 2008 R2, 2 network card (one disabled), sole domain controller
Approximately every 35 hours DNS fails. The first sign of it happening is in the event log for Active Directory Web Services.
Event ID 1206 "Active Directory Web Services was unable to determine if the computer is a global catalog server" The same event is then reported every 1 minutes after that.
Slowly but surely other components start failing (anything that needs to resolve a name - active directory, web access etc) Restarting DNS, ADWS services etc is to no avail.
The only thing that is unusual about this server is that one network has 2 IP addresses assigned.
When things have gone wrong runing DCDiag gives the following result:
"ladap search capability attribute search failed on server BISSVR01, return value = 81
Not sure if ADWS failure is the cause or just a symptom.
I am guessing that DNS is to blame, but I can't find anything wrong with the configuration.
Following a server restart everything works fine for another 35 hours....
X
January 16th, 2011 5:19pm
Hello,
let's start with an unedited ipconfig /all from the DC in question.
A DC should NEVER use more then one NIC or multiple ip addresses. And as you state this is the case. This always result in multiple problems within a domain and DNS.
More detaila about are in the great arcticle from Ace Fekay:
http://msmvps.com/blogs/acefekay/archive/2009/08/17/multihomed-dcs-with-dns-rras-and-or-pppoe-adapters.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2011 6:19am
Hello,
you can be lucky that this only happens after long time, this doesn't belong to a specific interval, maybe it belongs to some router maintenance on your ISP provider, i have no idea.
As you have seen in the article from Ace Fekay using RRAS on a DC is a bad option. So reconfigure your network and use a member server for RRAS. If not possible follow the recommendations in the article.
Also remove one ip address from the 192.168.x.x addresses. Then cleanup the DNS zones from the removed one, run ipconfig /flushdns and ipconfig /registerdns and restart the netlogon service or reboot.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
January 17th, 2011 6:28pm