DNS on a local domain

  • Thread starter Thread starter Robert Bartholomew Jr.
  • Start date Start date
In
Robert Bartholomew Jr. said:
"So any idea on how to change this?
Click to expand...

If you can;t get into the dialup properties to change it, you can try the
reg to force it.

I would also suggest, since this a DC, that a DC is really recommended not
to have these sort of services on it and put it on a member server. With
DCs, there are many variables that can cause domain miscommunication, this
being one of them, without added administrative overhead, as you;re
experiencing.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
The settings that need to change are not the dialup, they are correct. Its
the internal interface that the rras creates when you configure for NAT.


"Ace Fekay [MVP]"
 
In
Robert Bartholomew Jr. said:
The settings that need to change are not the dialup, they are
correct. Its the internal interface that the rras creates when you
configure for NAT.
Click to expand...

I don't believe that internal interface is configurable, nor does it show up
in an ipconfig /all. It does show up in RRAS under Interfaces. If I remember
correctly, that interface is the "connection Medium" for inbound RRAS
connections, whether VPNs are enabled or not (such as in your case since you
only enabled NAT).

Here's read more:

RRAS Console Displays an "Internal" Routing Interface
http://support.microsoft.com/?id=241398

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In
Robert Bartholomew Jr. said:
The settings that need to change are not the dialup, they are
correct. Its the internal interface that the rras creates when you
configure for NAT.
Click to expand...

In addition to my latest response, I'm not trying to say that you "SHOUDN'T"
do this, but that it's very highly recommended. It'll make life a little
easier.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
If this dialin interface is not part of the internal then what is it? I am
not sure where to go to change it.

I am compleatly frustraded with this. I dont know where to go next. I know
that this whole thing worked before I removed the root "." zone. The only
thing that was not working correctly was NAT since it needed forwarders.

"Ace Fekay [MVP]"
 
In
Robert Bartholomew Jr. said:
If this dialin interface is not part of the internal then what is it?
I am not sure where to go to change it.

I am compleatly frustraded with this. I dont know where to go next.
I know that this whole thing worked before I removed the root "."
zone. The only thing that was not working correctly was NAT since
it needed forwarders.
Click to expand...

Removing the Root zone has nothing to do with it.

DId you create a dialup interface in Network and Dialup Connections?
Or did you create it as a Demand Dial interface in RRAS (which would use the
one in Network and Dialup Connections).

Have you gone in there and checked?


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Demand Dial. This is created via a wizard in RRAS but does not endup in
Network and Dialup Connections. I will see if I can adjust it in RRAS.

"Ace Fekay [MVP]"
 
In
Robert Bartholomew Jr. said:
Demand Dial. This is created via a wizard in RRAS but does not endup
in Network and Dialup Connections. I will see if I can adjust it in
RRAS.
Click to expand...

Good, sounds like we're on to something. Let us know.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Well after doing all this it still did not work. I removed the regedits I
did and deleted the zone and reinstalled DNS and started over by creating a
zone 94rescue.local I then reentered the forwarders. NAT workes fine. I
am not getting group polices so I tried to ping 94rescue.local and I do not
get a responce. I can ping the server by name but not the domain.
I dont know what to do now;.
 
In
Robert Bartholomew Jr. said:
Well after doing all this it still did not work. I removed the
regedits I did and deleted the zone and reinstalled DNS and started
over by creating a zone 94rescue.local I then reentered the
forwarders. NAT workes fine. I am not getting group polices so I
tried to ping 94rescue.local and I do not get a responce. I can ping
the server by name but not the domain.
I dont know what to do now;.
Click to expand...

Do you have a (same as parent folder) record with the IP of your private NIC
in your forward lookup zone?
 
Yep. SInce I deleted the zone and reinstalled DNS I seem to have lost the
other folders that were ther befor but there are 2 blanks and one for each
computer on the network including the servers name.
 
In
Robert Bartholomew Jr. said:
Yep. SInce I deleted the zone and reinstalled DNS I seem to have
lost the other folders that were ther befor but there are 2 blanks
and one for each computer on the network including the servers name.
Click to expand...
If you re-installed the AD DNS zone did you restart the Netlogon service and
run ipconfig /registerdns?
 
I reinstalled and restarted the server. I looked at the blanks and there
were 2 one for the namserver and one for the admin. I created a new blank
with the server IP. I can now ping the domain by name.
 
Well I dont know what to do now. I am getting the errors that the DNS is
sending packets to itself. I dont know where to look to resolve this. I am
getting errors that there is no DNS server. I can ping the domain I can
ping the server by name I can route the network and shares. I can not
browse with my network places on clients. I am not getting group polices.
And I am not getting changes in user account access rights with groups. If
I add a user to a new group the settings are not being sent to the clients.

I am compleatly lost now.
 
In
Robert Bartholomew Jr. said:
Well I dont know what to do now. I am getting the errors that the
DNS is sending packets to itself. I dont know where to look to
resolve this. I am getting errors that there is no DNS server. I
can ping the domain I can ping the server by name I can route the
network and shares. I can not browse with my network places on
clients. I am not getting group polices. And I am not getting
changes in user account access rights with groups. If I add a user
to a new group the settings are not being sent to the clients.

I am compleatly lost now.
Click to expand...

Robert, it sounds like you have mutliple issues going on here. Can you post
an updated ipconfig /all please to see how far you have gotten with this?

Did you remove RRAS off this machine yet? I remember we were discussing that
with those registration issues you were having.

If GPOs are not applying, that can mean a couple things:
1. Client machines are NOT using only this internal DNS server.
2. SRV records are missing under the zone in DNS (that's where all the info
is stored about the domain).
3. Incorrect GC and other records (possibly due to RRAS registration we were
discussing earler).

If possible, do you know of a qualified consultant that can come in and help
you out? Hate to see you have all these problems. Maybe if some time, one of
us can remote in for you.


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Back
Top