Re: Strange DNS server change on a client.
From: Sharad Naik (sharadnaik_at_nospam-vsnl.net)
Date: 08/23/04
- Next message: TheSingingCat: "My Site DNS woes"
- Previous message: Jonte_at_bson.se: "Re: Emty DNS eventlog after upgrade to AD"
- In reply to: Sharad Naik: "Strange DNS server change on a client."
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 23 Aug 2004 20:32:43 +0530
I was able to trace the problem, but still the behaviour looks strange.
On the client in the registry I gave search for the ISP's IP address and
found it as the value set for Names Server
under key HKEY_LocalMachine\Software\Policies\Microsoft\WindowsNT\DNSClient.
Changed it to local names server and all is OK.
Last week, in Domain Group policy I had temporarily set DNS server to ISP's
DNS , to check if after
gpupdate the client gp also gets updated or not. (This was just a check
before replying to a post.)
Then I had set it back to 192.168.0.1 and did gpupdate again.
The server even was restarted last Saturday, all clients had shutdown for
the week end.
Misterously all clients except one reatined the policy, depsite gpupdate
/force after the final
change and server / client restart there after.
Sharad
"Sharad Naik" <sharadnaik@nospam-vsnl.net> wrote in message
news:OqIi5QOiEHA.2812@tk2msftngp13.phx.gbl...
> Hello,
> My setup is win2003 server, which is AD, DNS, DHCP and NAT and
> a Mail Server (third party)
> All clients connected on a single subnet - 192.168.0.x
> The DHCP server servers the Router and DNS server info to client
> through DHCP options.
>
> ISP's DNS server (202.71.156.156, which will appear in below log)
> is used as forwarder in the DNS server.
>
> All clients tcp/ip config is set to obtain IP / DNS automatically.
>
> For some strange reason, one of the clients suddenly reported
> he is not able send receive mail. (Mail server runs on 192.168.0.1)
> After checking all possibilities I found a strange thing.
> The client can log on to the domain. ipconfig /all shows correct
> DNS server. But if I run nslookup it goes to ISP's DNS server
> which is nowhere specified in the entire network execept in the
> forwarders list in DNS. (Group policies also point to the
> correct DNS server - 192.168.0.1)
> On other clients and on the server nslookup goes correctly to
> 192.168.0.1 only this particular client goes to ISP's DNS.
> There is no any other internet connection on the client.
> (no modem is set up, only one NIC.)
>
> ipconfig /renew and restarting the client didn't help.
>
> Below I am posting results of ipconfig /all from the server.
> Any suggestions where to start looking?
>
> Sharad
>
> FROM CLIENT MACHINE:
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : CRG
> Primary Dns Suffix . . . . . . . : avbadve.com
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : avbadve.com
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : avbadve.com
> Description . . . . . . . . . . . : Broadcom 440x 10/100
Integrated
> Cont
> roller
> Physical Address. . . . . . . . . : 00-02-E3-49-87-7A
> Dhcp Enabled. . . . . . . . . . . : Yes
> Autoconfiguration Enabled . . . . : Yes
> IP Address. . . . . . . . . . . . : 192.168.0.17
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.0.1
> DHCP Server . . . . . . . . . . . : 192.168.0.1
> DNS Servers . . . . . . . . . . . : 192.168.0.1
> Primary WINS Server . . . . . . . : 192.168.0.1
> Lease Obtained. . . . . . . . . . : 23 August 2004 12:29:47
> Lease Expires . . . . . . . . . . : 31 August 2004 12:29:47
>
> NSLOOKUP:--------
> C:\Documents and Settings\Administrator>nslookup
> Default Server: dnshyd.net4india.com
> Address: 202.71.156.156
>
> FROM the SERVER:
> C:\Documents and Settings\Administrator>ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : pvin01snt
> Primary Dns Suffix . . . . . . . : avbadve.com
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : avbadve.com
>
> Ethernet adapter Internet -1:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
> Ethernet
> NIC
> Physical Address. . . . . . . . . : 00-80-48-24-E9-AC
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 10.100.0.100
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 10.100.0.1
> DNS Servers . . . . . . . . . . . : 192.168.0.1
>
> Ethernet adapter LAN:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
> Connection
> Physical Address. . . . . . . . . : 00-30-6E-28-8A-FE
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.0.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
> DNS Servers . . . . . . . . . . . : 192.168.0.1
> Primary WINS Server . . . . . . . : 192.168.0.1
>
> NSLOOKUP:---
> C:\Documents and Settings\Administrator>nslookup
> Default Server: pvin01snt.avbadve.com
> Address: 192.168.0.1
>
>
- Next message: TheSingingCat: "My Site DNS woes"
- Previous message: Jonte_at_bson.se: "Re: Emty DNS eventlog after upgrade to AD"
- In reply to: Sharad Naik: "Strange DNS server change on a client."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|