GET-DNSSERVERRESOURCERECORD - Failed to get zone information

Question

_{Friday, January 6, 2017 7:11 PM}

Hope I can explain this right and concisely.

I am trying to verify that DNS Records are getting updated on Domain Controllers as I change settings on servers.

We have four sites: HQ, Co-Location, Site1, and Site2 -Single Forest/Domain

All DC's are either 2008 R2or 2012 R2 - I am in the process of upgrading the Forest/Domain to 2012 R2

When I run the command below from any DC in HQ to the DC's in either Site1 or Site2 it fails with "Failed to get the zone information" (I am editing the -ComputerName field to point to DC's in Site1 and Site2)

When I run the command from any DC in Site1 to any DC in HQ, it works, I get a listing of A records from that DC

When i run the command from any DC in Site1 to andy DC in Site2, it fails again with "Failed to get the zone information"

DNS is Active Directory Integrated, DNS Records are getting updated correctly on all DC's

This command works when ran against DC's in Co-Location

I run:

Get-DnsServerResourceRecord -Computername DCx.domain.com -ZoneName domain.com -RRType A

Any ideas?  I dont.

All replies (2)

_{Friday, January 6, 2017 7:47 PM ✅Answered}

You have a networking issue.  This is not a scripting problem.  I suggest that you contact MS support to help you troubleshoot your network.  It can be protocols, security, routers, firewall, trusts.

You can also start by running normal domain validation tools to validate your domain topology. 

There is really nothing you can do in a script to manage this.

If DNS is not set up correctly then you can also get similar issues.

\(ツ)_/

_{Friday, January 6, 2017 9:50 PM}

Port 53 TCP is being filtered.