Share via


Broken DNS delegations

Question

Monday, December 3, 2007 3:41 PM

 

Greetings everyone,

 

I hope someone can help me on this.  I inherited a Win2K3 network DNS system where we have 3 DNS servers that are  integrated with AD.  When the servers reboot I get a 5+ minute delay in statup at the "Preparing network connectiions".  I have run dcdiag /test;dns and I get the following errors below in BLUE and RED and would like to know if there is a way to correct these problems.

 

I am concerned about the lines that contain Root zone on this DC/DNS server was not found and Delegated domain name: structureinteractive.com.structureinteractive.com. and [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)].  I am not sure how to correct this and it is really a problem when the domain controllers / DNS servers take almost 10 minutes to reboot.

 

I would be very happy just to remove the offending delegations if possible.

 

Thank you in advance for you assistance with this.

 

Rick

 

DCDIAG RESULTS

C:\dcdiag /testns /dnsdelegation /v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine v2, is a DC.
   * Connecting to directory service on server v2.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 3 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\V2
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... V2 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\V2
      Test omitted by user request: Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: NCSecDesc
      Test omitted by user request: NetLogons
      Test omitted by user request: Advertising
      Test omitted by user request: KnowsOfRoleHolders
      Test omitted by user request: RidManager
      Test omitted by user request: MachineAccount
      Test omitted by user request: Services
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: ObjectsReplicated
      Test omitted by user request: frssysvol
      Test omitted by user request: frsevent
      Test omitted by user request: kccevent
      Test omitted by user request: systemlog
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyReferences
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...

   Running partition tests on : ForestDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : Schema
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : Configuration
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running partition tests on : structureinteractive
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom

   Running enterprise tests on : structureinteractive.com
      Test omitted by user request: Intersite
      Test omitted by user request: FsmoCheck
      Starting test: DNS
         Test results for domain controllers:

            DC: v2.structureinteractive.com
            Domain: structureinteractive.com

               TEST: Authentication (Auth)
                  Authentication test: Successfully completed

               TEST: Basic (Basc)
                   Microsoft(R) Windows(R) Server 2003, Enterprise Edition (Service Pack level: 2.0) is supported
                  NETLOGON service is running
                  kdc service is running
                  DNSCACHE service is running
                  DNS service is running
                  DC is a DNS server
                  Network adapters information:
                  Adapter [00000011] HP Network Teaming Virtual Miniport Driver:

                     MAC address is 00:11:85:C45:EB
                     IP address is static
                     IP address: 10.0.0.17
                     DNS servers:
                        127.0.0.1 (v2.structureinteractive.com.) [Valid]
                  The A record for this DC was found
                  The SOA record for the Active Directory zone was found
                  The Active Directory zone on this DC/DNS server was found (primary)
                  Root zone on this DC/DNS server was not found

               TEST: Delegations (Del)
                  Delegation information for the zone: structureinteractive.com.

                     Delegated domain name: structureinteractive.com.structureinteractive.com.
                        Error: DNS server: bkup-svr-1.structureinteractive.com.IP:10.0.0.15 [Broken delegation]
                        Error: DNS server: s1.structureinteractive.com. IP:10.0.0.16 [Broken delegation]
                        Error: DNS server: v2.structureinteractive.com. IP:10.0.0.17 [Broken delegation]

         Summary of test results for DNS servers used by the above domain controllers:

            DNS server: 10.0.0.15 (bkup-svr-1.structureinteractive.com.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain structureinteractive.com.structureinteractive.com. on the DNS server

10.0.0.15
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]

            DNS server: 10.0.0.16 (s1.structureinteractive.com.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain structureinteractive.com.structureinteractive.com. on the DNS server

10.0.0.16
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]

            DNS server: 10.0.0.17 (v2.structureinteractive.com.)
               1 test failure on this DNS server
               This is a valid DNS server
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered
               Delegation is broken for the domain structureinteractive.com.structureinteractive.com. on the DNS server

10.0.0.17
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
               ________________________________________________________________
            Domain: structureinteractive.com
               v2                           PASS PASS n/a  FAIL n/a  n/a  n/a

         ......................... structureinteractive.com failed test DNS

All replies (15)

Monday, March 10, 2008 12:16 PM

Hi All

 

We are experiencing the same thing.  This problem came to light after we starting seeing TGS errors for our Linux proxy from the KDC appearing in the system event log.  We ran the dcdiag tests and this jumped out.

 

As over 380 geeks have now looked at the original post and not a single suggestion has been forthcoming are we to assume that this is a "feature" of AD integrated DNS and has no bearing on our TGS error?

 

Someone must know!!

 

Ian

 


Monday, March 10, 2008 10:25 PM

 

Hi.

To diagnose this problem, I will
need to see this information:

  1. Ipconfig /all from your DCs
  2. Active Directory domain name from Active Directory Users & Computers.
  3. List of forward lookup zones on your local DNS server.

Your ipconfig /all should have a Primary DNS suffix that matches exactly
your Active Directory Domain name, and your Forward Lookup zone in DNS.
DNS should also have one additional Forward Lookup zone named
_msdcs.<ADDNSName>.

Also, in your ipconfig /all the DCs will need to point to another DC for the
Preferred DNS, and itself for Alternate. As with all AD Domain members, DCs
should also never have an ISP or other external DNS in TCP/IP properties.

OHM

MCSA


Tuesday, March 11, 2008 10:46 AM

 

Hi

 

Additional information that you requested follows:

 

1. Ipconfig /all from DCs

 

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : dc1
   Primary Dns Suffix  . . . . . . . : branch.mydomain.n-yorks.sch.uk
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : branch.mydomain.n-yorks.sch.uk
                                       mydomain.n-yorks.sch.uk
                                       n-yorks.sch.uk
                                       sch.uk

Ethernet adapter dc1:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Network Team #1
   Physical Address. . . . . . . . . : 00-02-A5-2C-DA-30
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.123.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.123.254
   DNS Servers . . . . . . . . . . . : 192.168.123.2
                                       192.168.123.1
   NetBIOS over Tcpip. . . . . . . . : Disabled

 

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : dc2
   Primary Dns Suffix  . . . . . . . : branch.mydomain.n-yorks.sch.uk
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : branch.mydomain.n-yorks.sch.uk
                                       mydomain.n-yorks.sch.uk
                                       n-yorks.sch.uk
                                       sch.uk

Ethernet adapter dc2:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP Network Team #1
   Physical Address. . . . . . . . . : 00-08-C7-E6-C6-62
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.123.2
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.123.254
   DNS Servers . . . . . . . . . . . : 192.168.123.1
                                       192.168.123.2
   NetBIOS over Tcpip. . . . . . . . : Disabled

 

 

2. Active Directory domain name from Active Directory Users & Computers

 

Obtained using adsiedit

 

DC=branch,DC=mydomain,DC=n-yorks,DC=sch,DC=uk

 

3. List of forward lookup zones on your local DNS server

 

192.168.123.14

192.168.123.3

 

Forward lookup zone _msdcs.branch.mydomain.n-yorks.sch.uk is present.

 

Hope you can come up with a solution.  If you need any more information let me know.

 

Ian


Wednesday, March 12, 2008 1:13 PM

In dns managment do you have a zone called branch.mydomain.n-yorks.sch.uk (Under forward lookup zones)?

 

OHM

 


Wednesday, March 12, 2008 1:31 PM

Yes.

 

Ian

 


Wednesday, March 12, 2008 1:39 PM

Can you run dcdiag /testns

 and post the output?


Wednesday, March 12, 2008 2:26 PM

I've already run dcdiag /testns and obtained the same result as the original post (obviously with different domain names) - that's why I posted.

 

Ian


Thursday, March 13, 2008 9:21 PM

To RickAtsi

You have incorrect information in your dns database. Look at your output of dcdiag. You have structureinteractive.com.structureinteractive.com in the output. Probably because you have used non-fully-qualified domain names.


Thursday, March 13, 2008 9:21 PM

To really help you I need that output from dcdiag.

 


Friday, June 26, 2009 12:59 AM

Hi all I´m getting the same error on DNS tested "dcdiag /test:dns"

We have 42 DCs after a system state recovery trying to recover a user account that was suddenly deleted we had lost THE PCDF sysvol share (we did recover the sysvol using FRS diag and technet)

and after using dcdiag /test:dns we got the following ERRORS

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine PDC-DC-Server, is a DC.
   * Connecting to directory service on server PDC-DC-Server.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 42 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests
  
   Testing server: SEDE\PDC-DC-Server
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... PDC-DC-Server passed test Connectivity

Doing primary tests
  
   Testing server: SEDE\PDC-DC-Server
      Test omitted by user request: Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: NCSecDesc
      Test omitted by user request: NetLogons
      Test omitted by user request: Advertising
      Test omitted by user request: KnowsOfRoleHolders
      Test omitted by user request: RidManager
      Test omitted by user request: MachineAccount
      Test omitted by user request: Services
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: ObjectsReplicated
      Test omitted by user request: frssysvol
      Test omitted by user request: frsevent
      Test omitted by user request: kccevent
      Test omitted by user request: systemlog
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyReferences
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

DNS Tests are running and not hung. Please wait a few minutes...
  
   Running partition tests on : ForestDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom
  
   Running partition tests on : DomainDnsZones
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom
  
   Running partition tests on : Schema
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom
  
   Running partition tests on : Configuration
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom
  
   Running partition tests on : pcdf
      Test omitted by user request: CrossRefValidation
      Test omitted by user request: CheckSDRefDom
  
   Running enterprise tests on : MYDOMAIN
      Test omitted by user request: Intersite
      Test omitted by user request: FsmoCheck
      Starting test: DNS
         Test results for domain controllers:
           
            DC: PDC-DC-Server.MYDOMAIN
            Domain: MYDOMAIN

                 
               TEST: Authentication (Auth)
                  Authentication test: Successfully completed
                 
               TEST: Basic (Basc)
                   Microsoft(R) Windows(R) Server 2003, Enterprise Edition (Service Pack level: 2.0) is supported
                  NETLOGON service is running
                  kdc service is running
                  DNSCACHE service is running
                  DNS service is running
                  DC is a DNS server
                  Network adapters information:
                  Adapter [00000002] HP NC373i Multifunction Gigabit Server Adapter:
                     MAC address is 00:1C:C4:6B:D2:14
                     IP address is static
                     IP address: 100.11.33.7
                     DNS servers:
                        100.11.33.7 (PDC-DC-Server.MYDOMAIN.) [Valid]
                        100.11.33.5 (DCnovo.MYDOMAIN.) [Valid]
                  The A record for this DC was found
                  The SOA record for the Active Directory zone was found
                  The Active Directory zone on this DC/DNS server was found (primary)
                  Root zone on this DC/DNS server was not found
                 
               TEST: Delegations (Del)
                  Delegation information for the zone: MYDOMAIN.
                     Delegated domain name: MYDOMAIN.MYDOMAIN.
                        Error: DNS server: apcsrv.MYDOMAIN. IP:100.11.147.10 [Broken delegation]
                        Error: DNS server: cepolsrv.MYDOMAIN. IP:100.11.210.10 [Broken delegation]
                        Error: DNS server: dca.MYDOMAIN. IP:100.11.140.10 [Broken delegation]
                        Error: DNS server: dca2srv.MYDOMAIN. IP:100.11.214.10 [Broken delegation]
                        Error: DNS server: deam.MYDOMAIN. IP:100.11.141.10 [Broken delegation]
                        Error: DNS server: deco.MYDOMAIN. IP:100.11.148.10 [Broken delegation]
                        Error: DNS server: demadrpi.MYDOMAIN. IP:100.11.146.10 [Broken delegation]
                        Error: DNS server: diposrv.MYDOMAIN. IP:100.11.208.10 [Broken delegation]
                        Error: DNS server: ditransrv.MYDOMAIN. IP:100.11.151.10 [Broken delegation]
                        Error: DNS server: drmsrv1.MYDOMAIN. IP:100.11.149.9 [Broken delegation]
                        Error: DNS server: DCnovo.MYDOMAIN. IP:100.11.33.5 [Broken delegation]
                        Error: DNS server: p01.MYDOMAIN. IP:100.11.101.10 [Broken delegation]
                        Error: DNS server: p02.MYDOMAIN. IP:100.11.102.10 [Broken delegation]
                        Error: DNS server: p03.MYDOMAIN. IP:100.11.103.10 [Broken delegation]
                        Error: DNS server: p04.MYDOMAIN. IP:100.11.104.10 [Broken delegation]
                        Error: DNS server: p05.MYDOMAIN. IP:100.11.105.10 [Broken delegation]
                        Error: DNS server: p06.MYDOMAIN. IP:100.11.106.10 [Broken delegation]
                        Error: DNS server: p08.MYDOMAIN. IP:100.11.108.10 [Broken delegation]
                        Error: DNS server: p09.MYDOMAIN. IP:100.11.109.10 [Broken delegation]
                        Error: DNS server: p10.MYDOMAIN. IP:100.11.110.10 [Broken delegation]
                        Error: DNS server: p11.MYDOMAIN. IP:100.11.111.10 [Broken delegation]
                        Error: DNS server: p12.MYDOMAIN. IP:100.11.112.10 [Broken delegation]
                        Error: DNS server: p13.MYDOMAIN. IP:100.11.113.10 [Broken delegation]
                        Error: DNS server: p14.MYDOMAIN. IP:100.11.114.10 [Broken delegation]
                        Error: DNS server: p15.MYDOMAIN. IP:100.11.115.10 [Broken delegation]
                        Error: DNS server: p16.MYDOMAIN. IP:100.11.116.10 [Broken delegation]
                        Error: DNS server: p17.MYDOMAIN. IP:100.11.117.10 [Broken delegation]
                        Error: DNS server: p18.MYDOMAIN. IP:100.11.118.10 [Broken delegation]
                        Error: DNS server: p19.MYDOMAIN. IP:100.11.119.10 [Broken delegation]
                        Error: DNS server: p20.MYDOMAIN. IP:100.11.120.10 [Broken delegation]
                        Error: DNS server: p21.MYDOMAIN. IP:100.11.121.10 [Broken delegation]
                        Error: DNS server: p23.MYDOMAIN. IP:100.11.123.10 [Broken delegation]
                        Error: DNS server: p24.MYDOMAIN. IP:100.11.124.10 [Broken delegation]
                        Error: DNS server: p26.MYDOMAIN. IP:100.11.126.10 [Broken delegation]
                        Error: DNS server: p27.MYDOMAIN. IP:100.11.127.10 [Broken delegation]
                        Error: DNS server: p29.MYDOMAIN. IP:100.11.129.10 [Broken delegation]
                        Error: DNS server: p30.MYDOMAIN. IP:100.11.130.10 [Broken delegation]
                        Error: DNS server: p31.MYDOMAIN. IP:100.11.131.10 [Broken delegation]
                        Error: DNS server: p32.MYDOMAIN. IP:100.11.132.10 [Broken delegation]
                        Error: DNS server: p33.MYDOMAIN. IP:100.11.133.10 [Broken delegation]
                        Error: DNS server: p35.MYDOMAIN. IP:100.11.135.10 [Broken delegation]
                        Error: DNS server: p38.MYDOMAIN. IP:100.11.138.10 [Broken delegation]
                        Error: DNS server: policlinica.MYDOMAIN. IP:100.11.205.10 [Broken delegation]
                        Error: DNS server: ppae.MYDOMAIN. IP:100.11.203.10 [Broken delegation]
                        Error: DNS server: ppcdg.MYDOMAIN. IP:100.11.211.10 [Broken delegation]
                        Error: DNS server: pphbb.MYDOMAIN. IP:100.11.144.10 [Broken delegation]
                        Error: DNS server: sia.MYDOMAIN. IP:100.11.143.9 [Broken delegation]
                        Error: DNS server: PDC-DC-Server.MYDOMAIN. IP:100.11.33.7 [Broken delegation]
                        Error: DNS server: srDCnovo.MYDOMAIN. IP:100.11.33.160 [Broken delegation]
                        Error: DNS server: srDCnovo.MYDOMAIN. IP:100.11.33.5 [Broken delegation]
                        Error: DNS server: srvdepate.MYDOMAIN. IP:100.11.148.10 [Broken delegation]
                        Error: DNS server: vega.pcdf.df.gov.br. IP:192.168.0.11 [Broken delegation]
        
         Summary of test results for DNS servers used by the above domain controllers:

            DNS server: 100.11.33.5 (DCnovo.MYDOMAIN.)
               2 test failures on this DNS server
               This is a valid DNS server
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.33.5
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.148.10 (deco.MYDOMAIN.)
               2 test failures on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.148.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.130.10 (p30.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.130.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.131.10 (p31.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.131.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.132.10 (p32.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.132.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.133.10 (p33.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.133.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.135.10 (p35.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.135.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.138.10 (p38.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.138.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.140.10 (dca.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.140.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.141.10 (deam.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.141.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.143.9 (sia.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.143.9
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.144.10 (pphbb.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.144.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.146.10 (demadrpi.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.146.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.147.10 (apcsrv.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.147.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.149.9 (drmsrv1.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.149.9
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.151.10 (ditransrv.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.151.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.203.10 (ppae.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.203.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.205.10 (policlinica.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.205.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.208.10 (diposrv.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.208.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.210.10 (cepolsrv.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.210.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.211.10 (ppcdg.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.211.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.214.10 (dca2srv.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.214.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.33.160 (srDCnovo.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.33.160
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.33.7 (PDC-DC-Server.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Name resolution is funtional. _ldap._tcp SRV record for the forest root domain is registered
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.33.7
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 192.168.0.11 (vega.pcdf.df.gov.br.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 192.168.0.11
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.101.10 (p01.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.101.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.102.10 (p02.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.102.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.103.10 (p03.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.103.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.104.10 (p04.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.104.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.105.10 (p05.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.105.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.106.10 (p06.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.106.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.108.10 (p08.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.108.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.109.10 (p09.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.109.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.110.10 (p10.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.110.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.111.10 (p11.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.111.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.112.10 (p12.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.112.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.113.10 (p13.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.113.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.114.10 (p14.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.114.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.115.10 (p15.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.115.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.116.10 (p16.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.116.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.117.10 (p17.MYDOMAIN.)
               1 test failure on this DNS server
               This is not a valid DNS server. PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 100.11.117.10
               [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.117.10
               [Error details: 1460 (Type: Win32 - Description: This operation returned because the timeout period expired.)]
              
            DNS server: 100.11.118.10 (p18.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.118.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.119.10 (p19.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.119.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.120.10 (p20.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.120.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.121.10 (p21.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.121.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.123.10 (p23.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.123.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.124.10 (p24.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.124.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.126.10 (p26.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.126.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.127.10 (p27.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.127.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
            DNS server: 100.11.129.10 (p29.MYDOMAIN.)
               1 test failure on this DNS server
               This is a valid DNS server
               Delegation is broken for the domain MYDOMAIN.MYDOMAIN. on the DNS server 100.11.129.10
               [Error details: 9003 (Type: Win32 - Description: DNS name does not exist.)]
              
         Summary of DNS test results:
        
                                            Auth Basc Forw Del  Dyn  RReg Ext 
               ________________________________________________________________
            Domain: MYDOMAIN
               PDC-DC-Server                      PASS PASS n/a  FAIL n/a  n/a  n/a 
        
         ......................... MYDOMAIN failed test DNS

Thiago Beier


Saturday, November 28, 2009 10:10 PM

Have you fixed it ?


Friday, December 25, 2009 8:38 AM | 2 votes

Check out all "Name Servers" tabs for all forward lookup zones and reverse lookup zones in each domain (and forest root domain). Don't foget about delegated zones (grey folders in DNS tree under main forward/reverse zone entry) if any. Locate all servers with <unknown> in "IP Address" field and remove them. It may help.

P.S. Or someone created ALIAS with FQDN in "name" field so every child dns-domain was created. Recreate ALIAS and delete all child domains from forward lookup zone.


Monday, December 28, 2009 11:47 AM

Yeah, long time ago we discovered in ROOT dns zone
a wrong registry calling another unknow domain . . . so strangeThiago Beier


Thursday, February 9, 2012 1:32 AM

Ah! I'm glad I found this ancient post. I had the same problem, and after reading your post, I double checked my forward lookup zones, and there was a "org" domain in there. Sure enough, in there was a static alias that was server.domain.org.domain.org.

Deleted it and re-ran dcdiag with all passing tests


Wednesday, March 28, 2012 3:30 PM

Make that two as I found the same thing that SoylentRed found.  My issue occurred when one of the DCs was missing its CNAME and it an attempt to manually recreated it was done.  Deleted the domain.local delegation under the domain.local forward lookup zone and issue is resolved.