Re: DNS CORRUPT AND ALL SYSTEMS DOWN

In news:8125B88F-FFC6-45F4-AEBC-7991F28650E6@xxxxxxxxxxxxx,
Tony <Tony@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I then commented on
below:
> ceisvr net start:
> These Windows services are started:
>
> Application Layer Gateway Service
> Automatic Updates
> Certificate Services
> COM+ Event System
> Computer Browser
> Cryptographic Services
> DHCP Client
> DHCP Server
> Distributed File System
> Distributed Transaction Coordinator
> DNS Client
> DNS Server
> Error Reporting Service
> Event Log
> File Replication Service
> Help and Support
> HP Web Jetadmin
> Indexing Service
> Intersite Messaging
> IPSEC Services
> Kerberos Key Distribution Center
> License Logging
> Logical Disk Manager
> Microsoft Search
> MSSQL$ACT7
> Net Logon
> Network Connections
> Network DDE
> Network DDE DSDM
> Network Location Awareness (NLA)
> NT LM Security Support Provider
> Plug and Play
> Print Spooler
> Protected Storage
> Remote Access Connection Manager
> Remote Procedure Call (RPC)
> Remote Registry
> Routing and Remote Access
> Secondary Logon
> Security Accounts Manager
> Server
> Shell Hardware Detection
> SNMP Service
> System Event Notification
> Task Scheduler
> TCP/IP NetBIOS Helper
> Telephony
> Terminal Services
> Windows Internet Name Service (WINS)
> Windows Management Instrumentation
> Windows Time
> Wireless Configuration
> Workstation
>
> The command completed successfully.
>
> Expedition Net Start:
> These Windows services are started:
>
> Application Experience Lookup Service
> Application Management
> Automatic Updates
> COM+ Event System
> Cryptographic Services
> DCOM Server Process Launcher
> Distributed File System
> Distributed Transaction Coordinator
> DNS Client
> DNS Server
> Error Reporting Service
> Event Log
> FTP Publishing Service
> Help and Support
> HTTP SSL
> IIS Admin Service
> Indexing Service
> Intersite Messaging
> IPSEC Services
> Kerberos Key Distribution Center
> Logical Disk Manager
> Message Queuing
> Message Queuing Triggers
> Microsoft POP3 Service
> MySQL
> Net Logon
> Network Connections
> Network Location Awareness (NLA)
> NT LM Security Support Provider
> Plug and Play
> Print Spooler
> Protected Storage
> Remote Administration Service
> Remote Procedure Call (RPC)
> Remote Registry
> Remote Server Manager
> Secondary Logon
> Security Accounts Manager
> Server
> Shell Hardware Detection
> Simple Mail Transfer Protocol (SMTP)
> Simple TCP/IP Services
> SNMP Service
> System Event Notification
> Task Scheduler
> TCP/IP NetBIOS Helper
> Terminal Services
> Web Element Manager
> WebTool
> Windows Management Instrumentation
> Windows Time
> Wireless Configuration
> Workstation
> World Wide Web Publishing Service
>
> The command completed successfully.
>
> Orion Net Start:
> These Windows 2000 services are started:
>
>
> Alerter
> Automatic Updates
> ColdFusion MX Application Server
> ColdFusion MX ODBC Agent
> ColdFusion MX ODBC Server
> COM+ Event System
> Computer Browser
> DHCP Client
> DHCP Server
> Distributed File System
> Distributed Link Tracking Client
> Distributed Link Tracking Server
> Distributed Transaction Coordinator
> DNS Client
> DNS Server
> Event Log
> File Replication Service
> Indexing Service
> Internet Authentication Service
> Intersite Messaging
> Kerberos Key Distribution Center
> License Logging Service
> Logical Disk Manager
> Machine Debug Manager
> Message Queuing
> Microsoft Search
> MSSQL$ACT7
> MSSQLSERVER
> Net Logon
> Network Connections
> NT LM Security Support Provider
> NVIDIA Driver Helper Service
> Plug and Play
> Print Spooler
> Protected Storage
> Remote Access Connection Manager
> Remote Procedure Call (RPC)
> Remote Procedure Call (RPC) Locator
> Remote Registry Service
> Removable Storage
> Routing and Remote Access
> RunAs Service
> Security Accounts Manager
> Server
> Simple TCP/IP Services
> SNMP Service
> System Event Notification
> Task Scheduler
> TCP/IP NetBIOS Helper Service
> Telephony
> Terminal Services
> WebTool
> Windows Internet Name Service (WINS)
> Windows Management Instrumentation
> Windows Management Instrumentation Driver Extensions
> Windows Time
> Workstation
>
> The command completed successfully.
>
> ndscmd /enumzones results:
> ceisvr:
> Enumerated zone list:
>
> Zone count = 4
>
> Zone name Type Storage Properties
>
> . Cache AD-Legacy
> _msdcs.compuexec.com Primary AD-Forest Secure Aging
> 50.168.192.in-addr.arpa Primary AD-Legacy Update Rev
> Aging compuexec.com Primary AD-Domain
> Secure Aging
>
> Command completed successfully.
>
>
> Orion:
> Enumerated zone list:
>
> Zone Count = 6.
>
> . 0 DS Up=0
>
> 0.in-addr.arpa 1 file Rev Auto Up=0
>
> 127.in-addr.arpa 1 file Rev Auto Up=0
>
> 255.in-addr.arpa 1 file Rev Auto Up=0
>
> 50.168.192.in-addr.arpa 1 DS Rev Up=1 Aging
>
> compuexec.com 2 file Up=0
>
> Command completed successfully.
>
>
> expedition:
> Enumerated zone list:
>
> Zone count = 4
>
> Zone name Type Storage Properties
>
> . Cache AD-Legacy
> _msdcs.compuexec.com Primary AD-Forest Secure Aging
> 50.168.192.in-addr.arpa Primary AD-Legacy Update Rev
> Aging compuexec.com Primary AD-Domain
> Secure Aging
>
> Command completed successfully.
>
> Thanks again for your (and Todd's) continued support.
>
> At this point I am extremely frustrated. Is there an easy way to just
> delete all of the DNS services and start over? Would we be able to
> recreate all the user accounts and thereby able to again access our
> local profiles at the desktop?

The DHCP Client service on Expedition is not started. I understand that
Expedition is not a DHCP client, but this services is actually a REQUIREMENT
for dynamic registration. Please turn it on.

Going thru the other services running, they seem fine.I am wondering, in
case I missed anything, did you disable any other services?

Also, what worries me is Cold Fusion on Orion:
> ColdFusion MX Application Server
> ColdFusion MX ODBC Agent
> ColdFusion MX ODBC Server

The reason, if I understand ColdFusion, is ColdFusion is an X.500 Directory
service (which is exactly what Active Directory is). If it is using it's
directory service, it also uses port 389. This can be a cause of confusion
and conflict with a domain controller. Can you look into that please?

The zone look good too. What I need to see is a list of the records under
the _msdcs folder, specifically what exactly does it show for the _msdcs.gc
records? They indicate what the GCs are for the forest.

And yes, you can delete the records and start over. Easy:
1. Delete the records in the zone (you don't have to delete the zone itself)
2. Delete the netlogon.dns and netlogon.bak files in the system32\config
folder on each DC
3. Run ipconfig /registerdns on each DC
4. Restart the netlogon service on each DC. You can do that in a CMD prompt:
net stop netlogon
net start netlogon
5. Check the zone to see if the data for each DC gets registered correctly.

Ace

Ace


.

Relevant Pages

  • Re: upgrading frm XP Home to Pro
    ... Why do you think you need Windows XP Professional? ... won't and we need to upgrade all the computers to Pro. ... You bought a server to 'network your computers' and so you can ... software) would give you the same abilities as 'Remote Desktop' ...
    (microsoft.public.windowsxp.general)
  • Can Not connect to IPC$ Share while processing a CCR
    ... CCM log shows the SMS server successfully connecting to the Admin$ share, but the attempt to connect to the IPC$ shares of these systems fails with an error 5. ... Logical Disk Manager Administrative Service ... Network Associates Task Manager ... Remote Access Auto Connection Manager ...
    (microsoft.public.sms.setup)
  • SecurityFocus Microsoft Newsletter #139
    ... OFF any Windows 2000 Managed Dedicated Hosting Solution from Interland. ... Sun ONE Application Server Plaintext Password Vulnerability ... Batalla Naval Remote Buffer Overflow Vulnerability ...
    (Focus-Microsoft)
  • Re: DNS CORRUPT AND ALL SYSTEMS DOWN
    ... DHCP Server ... Remote Access Connection Manager ... Windows Internet Name Service ...
    (microsoft.public.windows.server.dns)
  • RE: sshd for windows
    ... As is Windows Terminal Services and Remote Desktop. ... looking for a way to log in remotely to a Windows 2000 server. ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)