Okay, weird one here...server 2003 domain. When browsing to \\example.mydomain.com\ I sometimes get the FSMO and sometimes the secondary DC. Problem is that when I'm getting the secondary DC I also get tons of 1058 application events due to not being able to process the default domain policy. There's no rhyme or reason as to when \\example.mydomain.com\ browses to the FSMO or to the secondary. Any ideas? TIA!

Hello, please check that the DNS record named "example" in your "mydomain.com" zone is not pointing to both DCs. If your domain name is example.mydomain.com then this is perfectly normal. Also, please check the used DNS server and that it contains a correct copy of your zone. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator

Thx Mr X. It is the domain name and both the primary (FSMO) and secondary DC's are listed. When you says 'contains a correct copy' what do you mean? This is a single site domain with 2 DC's, nothing fancy. How do I check? The FSMO is the one and only DNS server.

Hello, it seems that your DCs are not running correct, so please upload the following output files: ipconfig /all >c:\ipconfig.txt [from each DC/DNS Server] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) As the output will become large, DON'T post them into the thread, please use Windows Sky Drive (skydrive.live.com) [with open access!] and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

FYI, running dfsutil fixed the issue (dfsutil /clearmupcache). Thx for your responses.