[7thson]

Hello

I am facing a problem with my windows 2008 DC DNS.

Event ID: 4007

The DNS server was unable to open zone _msdcs.mace.ae in the Active Directory from the application directory partition ForestDnsZones.mace.ae. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.

Please see below the IPCONFIG /ALL for my dc:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : MACEGDPSRVR
Primary Dns Suffix . . . . . . . : mace.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mace.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7781 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-11-85-E8-C8-BE
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.5(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.5
Primary WINS Server . . . . . . . : 192.168.1.5
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{BCC4BD54-43A7-4E6A-BAE7-EF01AF641
190}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

I ran the DCDIAG tool & please find the results below:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>dcdiag /e /test:dns

Directory Server Diagnosis

Performing initial setup:
Trying to find home server...
Home Server = MACEGDPSRVR
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MACEGDPSRVR
Starting test: Connectivity
......................... MACEGDPSRVR passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MACEGDPSRVR

Starting test: DNS

DNS Tests are running and not hung. Please wait a few minutes...
......................... MACEGDPSRVR passed test DNS

Running partition tests on : ForestDnsZones

Running partition tests on : DomainDnsZones

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : mace

Running enterprise tests on : mace.local
Starting test: DNS
Test results for domain controllers:

DC: MACEGDPSRVR.mace.local
Domain: mace.local


TEST: Basic (Basc)
Warning: The AAAA record for this DC was not found

TEST: Records registration (RReg)
Network Adapter [00000006] HP NC7781 Gigabit Server Adapter:
Warning:
Missing AAAA record at DNS server 192.168.1.5:
MACEGDPSRVR.mace.local

Warning:
Missing AAAA record at DNS server 192.168.1.5:
gc._msdcs.mace.local

Warning: Record Registrations not found in some network adapters

MACEGDPSRVR PASS WARN PASS PASS PASS WARN n/a
......................... mace.local passed test DNS

I ran the NSLOOKUP:

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Administrator.MACE-GDP-SERVER>nslookup
Default Server: UnKnown
Address: 192.168.1.5

Please know that mace.ae was initially setup as the domain name, which we cahnged to mace.local.

mace.ae does not exist anymore & we do not need this anymore in the AD. We need all record to point to mace.local.


Please tell me:

1. how can i get rid of this error?

2. Is my DNS healthy

3. Please advise me on anything I need to do on my DNS settings to make sure the network remains healthy.


Thank You.

Philip