Win2003 DNS errors

  • Thread starter Thread starter anhfhsk
  • Start date Start date
A

anhfhsk

I receive thousands of DNS errors, and i don't know what
all these are. DNS client service is disabled and i don't
want this machine to at all register itself with the uplink
DNS, but it tries to do that anyway. I only want it to act
as a DNS server for the LAN. How to do this?



---------------
Event-id 40961:
---------------
The Security System could not establish a secured
connection with the server DNS/prisoner.iana.org. No
authentication protocol was available.


---------------
Event-ID 5774:
---------------
The dynamic registration of the DNS record
'_kpasswd._tcp.bbbbb.ccc.dd. 600 IN SRV 0 100 464
aaaaa.bbbbb.ccc.dd.' failed on the following DNS server:

DNS server IP address: 999.999.999.999
Returned Response Code (RCODE): 5
Returned Status Code: 9017

For computers and users to locate this domain controller,
this record must be registered in DNS.

USER ACTION
Determine what might have caused this failure, resolve the
problem, and initiate registration of the DNS records by
the domain controller. To determine what might have caused
this failure, run DCDiag.exe. You can find this program on
the Windows Server 2003 installation CD in
Support\Tools\support.cab. To learn more about DCDiag.exe,
see Help and Support Center. To initiate registration of
the DNS records by this domain controller, run 'nltest.exe
/dsregdns' from the command prompt on the domain
controller or restart Net Logon service. Nltest.exe is
available in the Microsoft Windows Server Resource Kit CD.
Or, you can manually add this record to DNS, but it is
not recommended.

ADDITIONAL DATA
Error Value: DNS bad key.



---------------
Event-ID 5775:
---------------
The dynamic deletion of the DNS record 'bbbbb.ccc.dd. 600
IN A 192.168.0.6' failed on the following DNS server:

DNS server IP address: 999.999.999.999
Returned Response Code (RCODE): 5
Returned Status Code: 9017

USER ACTION
To prevent remote computers from connecting unnecessarily
to the domain controller, delete the record manually or
troubleshoot the failure to dynamically delete the record.
To learn more about debugging DNS, see Help and Support
Center.

ADDITIONAL DATA
Error Value: DNS bad key.
 
In anhfhsk <[email protected]> posted a question
Then Kevin replied below:
: I receive thousands of DNS errors, and i don't know what
: all these are. DNS client service is disabled and i don't
: want this machine to at all register itself with the uplink
: DNS, but it tries to do that anyway. I only want it to act
: as a DNS server for the LAN. How to do this?
:
:
:
: ---------------
: Event-id 40961:
: ---------------
: The Security System could not establish a secured
: connection with the server DNS/prisoner.iana.org. No
: authentication protocol was available.
:
:
: ---------------
: Event-ID 5774:
: ---------------
: The dynamic registration of the DNS record
: '_kpasswd._tcp.bbbbb.ccc.dd. 600 IN SRV 0 100 464
: aaaaa.bbbbb.ccc.dd.' failed on the following DNS server:
:
: DNS server IP address: 999.999.999.999
: Returned Response Code (RCODE): 5
: Returned Status Code: 9017
:
: For computers and users to locate this domain controller,
: this record must be registered in DNS.
:
: USER ACTION
: Determine what might have caused this failure, resolve the
: problem, and initiate registration of the DNS records by
: the domain controller. To determine what might have caused
: this failure, run DCDiag.exe. You can find this program on
: the Windows Server 2003 installation CD in
: Support\Tools\support.cab. To learn more about DCDiag.exe,
: see Help and Support Center. To initiate registration of
: the DNS records by this domain controller, run 'nltest.exe
: /dsregdns' from the command prompt on the domain
: controller or restart Net Logon service. Nltest.exe is
: available in the Microsoft Windows Server Resource Kit CD.
: Or, you can manually add this record to DNS, but it is
: not recommended.
:
: ADDITIONAL DATA
: Error Value: DNS bad key.
:
:
:
: ---------------
: Event-ID 5775:
: ---------------
: The dynamic deletion of the DNS record 'bbbbb.ccc.dd. 600
: IN A 192.168.0.6' failed on the following DNS server:
:
: DNS server IP address: 999.999.999.999
: Returned Response Code (RCODE): 5
: Returned Status Code: 9017
:
: USER ACTION
: To prevent remote computers from connecting unnecessarily
: to the domain controller, delete the record manually or
: troubleshoot the failure to dynamically delete the record.
: To learn more about debugging DNS, see Help and Support
: Center.
:
: ADDITIONAL DATA
: Error Value: DNS bad key.

All those errors are caused from using your ISP's DNS in your DC's NIC.
You are not supposed to put Your ISP's DNS in the NIC, remove it and put in
the DNS server's own IP address in the NIC. Then put your ISP's DNS in as a
forwarder, if forwarders are grayed out, delete the "." Forward Lookup Zone.
Read this starting at step 3.
300202 - HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?id=300202&FR=1
 
In
All those errors are caused from using your ISP's DNS in your DC's
NIC.
You are not supposed to put Your ISP's DNS in the NIC, remove it and
put in the DNS server's own IP address in the NIC. Then put your
ISP's DNS in as a forwarder, if forwarders are grayed out, delete the
"." Forward Lookup Zone. Read this starting at step 3.
300202 - HOW TO: Configure DNS for Internet Access in Windows 2000
http://support.microsoft.com/?id=300202&FR=1

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================

In addition, the 40961 error can be eliminated by creating a reverse zone.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
remove it and put in the DNS server's
own IP address in the NIC.

wich means 127.0.0.1 or 10.10.10.253 ?

put your ISP's DNS in as a forwarder

How to do this? I tried to follow the steps on linked
webpage, but when clicking "finish" it gave an error
telling it already exists.
Hoe do i add a dns server that should not try to register
this server, but only use the dns server as a sorce of dns
info? without registering the server on the dns server.
 
In
anhfhsk said:
wich means 127.0.0.1 or 10.10.10.253 ?

Use the actual IP (10.10.10.253). Don't ever use the loopback address
(127.0.0.1). It won't let you anyway unless you force it thru the reg.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Back
Top