RE: DNS trying to contact mail.lobo.net

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Bob,

Thanks for your reply.

I am not sure you may find it from ADSI Edit or Registry. However, you may
try to search 216.243.96.4 in Registry and to see what we can find.

Furthermore, have you checked the zone properties? Such as SOA, Name
Servers? To check this, open DNS MMC, right click the problematic zone and
click Properties.

If the issue persists, could you please help me collect some system
information for further assistance?

1. Download MPSReport tool from below URL:

<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
915706/MPSRPT_SETUPPerf.EXE>

2. Execute the tool on the computer, and if you are prompted "Include the
MSINFO32 report?", please type Y.

3. Please send the result file (CAB file) to me at v-tomche@xxxxxxxxxxxxxx

For detailed information about the MPS Report Tools, please refer to the
following link:

Microsoft Product Support's Reporting Tools
<http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F
-88B7-F9C79B7306C0&displaylang=en>

Hope this helps.

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: DNS trying to contact mail.lobo.net
>thread-index: AcXr/MrIAAY0dBTcTZys3emvIPTXZw==
>X-WBNR-Posting-Host: 24.16.129.12
>From: "=?Utf-8?B?Qm9iTA==?=" <divebikebob45@xxxxxxxxxxxxxx>
>References: <0F92A8B7-E9D9-48BE-BC08-D87E68FD378F@xxxxxxxxxxxxx>
<Lr8CJaP6FHA.1240@xxxxxxxxxxxxxxxxxxxxx>
<C421C76D-DA24-4AA6-B42A-4195F3161159@xxxxxxxxxxxxx>
<Qfi5JKr6FHA.1236@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: DNS trying to contact mail.lobo.net
>Date: Thu, 17 Nov 2005 20:59:01 -0800
>Lines: 266
>Message-ID: <3CBCEA8A-CD1E-4E29-A97D-6952A185DBB3@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.dns
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.dns:23935
>X-Tomcat-NG: microsoft.public.windows.server.dns
>
>Tom,
>
>I tried your suggestion and the entry is not in any preferred or alternate
>DNS server. I cannot find it in any forwarder setting or in the root
hints.
>Is there a way I could use ADSI edit or regedit to find the entry. It
seems
>to be well hidden.
>
>Thanks.
>
>--
>BobL
>
>
>"Tom Che [MSFT]" wrote:
>
>> Hi Bob,
>>
>> Thanks for your reply.
>>
>> I understand that you get Event ID 5774 error.
>>
>> In general, the error message is logged because the Netlogon service
does
>> not receive a "success" message from the DNS server that owns the zones
of
>> the records that are being registered. There are several reasons why the
>> Netlogon service does not receive a "success" message:
>> - Domain controller configuration: DNS server entries in the
Transmission
>> Control Protocol/Internet Protocol (TCP/IP) properties of the domain
>> controller are not properly configured.
>> - Connectivity: This domain controller does not have Internet Protocol
>> (IP), or Transmission Control Protocol/User Datagram Protocol (TCP/UDP),
>> connectivity to the DNS servers that own the zones to which records need
to
>> be registered or deregistered.
>> - DNS server configuration: The DNS server cannot accept dynamic updates
or
>> is not configured to accept dynamic updates, as described in the Request
>> For Comments (RFC) 2136 specification. If the DNS server that is used by
>> the domain controller is not authoritative for the zones to which the
>> Netlogon service is attempting to register or deregister, the DNS server
>> must be able to provide (to this domain controller) the IP address of
the
>> DNS servers that are authoritative for the affected zones.
>>
>> In your case, I think the first reason may be needed to check. Please
run
>> IPCONFIG /ALL command on the 2003 Server, and if you see 216.243.96.4
>> follows DNS Servers, it indicates that the TCP/IP properties of the
server
>> are not configured properly. You may refer to the following steps:
>>
>> If the IP configuration is set to manual, you may remove the
216.243.96.4
>> from DNS settings:
>>
>> 1. Open Control Panel -> Network Connections.
>> 2. Right click one of the network connections, and then click Properties.
>> 3. Click Internet Protocol (TCP/IP), and then click Properties button.
>> 4. Remove 216.243.96.4 from the Preferred DNS server or Alternate DNS
>> server.
>>
>> If the IP of the server is obtained from a DHCP Server, you may change
the
>> DHCP's DNS settings on the DHCP server. For information, please see:
>>
>> Configuring scopes
>>
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
>> erHelp/38dc9461-3e15-4bc6-809a-3bda36384ca2.mspx>
>>
>> For more information about Event ID 5774, please see:
>>
>> Troubleshooting Netlogon Event 5774, 5775, and 5781
>> http://support.microsoft.com/?id=259277
>>
>> Hope this helps.
>>
>> Have a nice day!
>>
>> Sincerely,
>> Tom Che
>> Microsoft Online Partner Support
>> Get Secure! - www.microsoft.com/security
>>
>> =====================================================
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> =====================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: DNS trying to contact mail.lobo.net
>> >thread-index: AcXqTmHlaYu3R+XBTbuwEY8HI5pQng==
>> >X-WBNR-Posting-Host: 24.16.129.12
>> >From: "=?Utf-8?B?Qm9iTA==?=" <divebikebob45@xxxxxxxxxxxxxx>
>> >References: <0F92A8B7-E9D9-48BE-BC08-D87E68FD378F@xxxxxxxxxxxxx>
>> <Lr8CJaP6FHA.1240@xxxxxxxxxxxxxxxxxxxxx>
>> >Subject: RE: DNS trying to contact mail.lobo.net
>> >Date: Tue, 15 Nov 2005 17:38:02 -0800
>> >Lines: 145
>> >Message-ID: <C421C76D-DA24-4AA6-B42A-4195F3161159@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.dns
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.dns:23853
>> >X-Tomcat-NG: microsoft.public.windows.server.dns
>> >
>> >Tom,
>> >
>> >Here is the error message. Yes the DC is a DNS server:
>> >
>> >Event Type: Error
>> >Event Source: NETLOGON
>> >Event Category: None
>> >Event ID: 5774
>> >Date: 11/13/2005
>> >Time: 12:31:08 PM
>> >User: N/A
>> >Computer: SERVER3
>> >Description:
>> >The dynamic registration of the DNS record
>>
>'_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.ntmknt1.practice.
>> com.
>> >600 IN SRV 0 100 389 server3.ntmknt1.practice.com.' failed on the
>> following
>> >DNS server:
>> >
>> >DNS server IP address: 216.243.96.4
>> >Returned Response Code (RCODE): 5
>> >Returned Status Code: 9017
>> >
>> >For computers and users to locate this domain controller, this record
must
>> >be registered in DNS.
>> >
>> >USER ACTION
>> >Determine what might have caused this failure, resolve the problem, and
>> >initiate registration of the DNS records by the domain controller. To
>> >determine what might have caused this failure, run DCDiag.exe. You can
>> find
>> >this program on the Windows Server 2003 installation CD in
>> >Support\Tools\support.cab. To learn more about DCDiag.exe, see Help
and
>> >Support Center. To initiate registration of the DNS records by this
>> domain
>> >controller, run 'nltest.exe /dsregdns' from the command prompt on the
>> domain
>> >controller or restart Net Logon service. Nltest.exe is available in the
>> >Microsoft Windows Server Resource Kit CD.
>> > Or, you can manually add this record to DNS, but it is not
recommended.
>> >
>> >ADDITIONAL DATA
>> >Error Value: DNS bad key.
>> >
>> >For more information, see Help and Support Center at
>> >http://go.microsoft.com/fwlink/events.asp.
>> >Data:
>> >0000: 05 00 ..
>> >
>> >I am just looking for the directions to delete this IP address out of
>> >whatever data file it might be hiding in.
>> >
>> >Thanks.
>> >--
>> >BobL
>> >
>> >
>> >"Tom Che [MSFT]" wrote:
>> >
>> >> Hi Bob,
>> >>
>> >> Thanks for your posting.
>> >>
>> >> I am afraid we need more detailed information about this issue before
we
>> >> can help you more. Could you please let me know what the strange
error
>> >> messages are verbatim?
>> >>
>> >> Lobo.net seems to be an ISP, so please check your IP configuration
about
>> >> DNS Servers. You may use IPCONFIG /ALL command to check the
information.
>> >>
>> >> In addition, please also let us know the following information for
>> further
>> >> assistance:
>> >>
>> >> 1. Is the problematic DC a DNS server?
>> >>
>> >> 2. If it is a DNS server, you may also check the following settings:
>> >>
>> >> a. Forwarders
>> >> b. Root Hints
>> >> c. Zone Transfers
>> >>
>> >> 3. If it is a DNS server, please open Event Viewer to check if there
is
>> any
>> >> error under DNS Events. If so, please paste them here for
>> troubleshooting.
>> >>
>> >> For more information about DNS server configuration, please see:
>> >>
>> >>
>>
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serv
>> >> erHelp/38dc9461-3e15-4bc6-809a-3bda36384ca2.mspx>
>> >>
>> >> Hope this helps. I look forward to hearing from you soon.
>> >>
>> >> Have a nice day!
>> >>
>> >> Sincerely,
>> >> Tom Che
>> >> Microsoft Online Partner Support
>> >> Get Secure! - www.microsoft.com/security
>> >>
>> >> =====================================================
>> >> When responding to posts, please "Reply to Group" via your newsreader
so
>> >> that others may learn and benefit from your issue.
>> >> =====================================================
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >Thread-Topic: DNS trying to contact mail.lobo.net
>> >> >thread-index: AcXnztguNTwXRpZMQIConEMK8qEQOg==
>> >> >X-WBNR-Posting-Host: 24.16.129.12
>> >> >From: "=?Utf-8?B?Qm9iTA==?=" <divebikebob45@xxxxxxxxxxxxxx>
>> >> >Subject: DNS trying to contact mail.lobo.net
>> >> >Date: Sat, 12 Nov 2005 13:20:02 -0800
>> >> >Lines: 16
>> >> >Message-ID: <0F92A8B7-E9D9-48BE-BC08-D87E68FD378F@xxxxxxxxxxxxx>
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 7bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windows.server.dns
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.dns:23765
>> >> >X-Tomcat-NG: microsoft.public.windows.server.dns
>> >> >
>> >> >Hi,
>> >> >
>> >> >I get a strange series of error messages when a Windows 2003 Domain
>> >> >Controller in a lab environment boots up. It appears to be trying
to
>> >> >exchange DNS information with 216.243.96.4, which resolves to
>> >> mail.lobo.net.
>> >> >
>> >> >I have no idea why it is trying to do this, since I never remember
>> setting
>> >> >this up. I looked in the DNS Resource Records and could find no
>> >> indication
>> >> >of this IP address. Can anyone tell me how to remove 216.243.96.4
from
>> >> >Active Directory?
>> >> >
>> >> >Thanks,
>> >> >
>> >> >BobL
>> >> >--
>> >> >BobL
>> >> >
>> >>
>> >>
>> >
>>
>>
>

.

Quantcast