Re: DNS signature failed to verify error

Tech-Archive recommends: Speed Up your PC by fixing your registry

Read inline please.

In news:152BACEE-B323-431E-829E-5F393D402449@xxxxxxxxxxxxx,
Don <Don@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hey Kevin,

Again thanks for your input on this.

Since DNS on both servers only contains the NS record of the SBS
(srv1)
under the delegation _msdcs, what is the solution to getting the
missing NS record corrected?
Remember this is a Win 2K3 environment only.

With regards to the Events 4015 and 4004 I did the homework earlier
and yes the _msdcs.domain.local zone on both DNS's are set to
replicate to "All DNS servers in the Active Directory forest". While
the Domain.local zone is set to "All DNS servers in the Active
Directory domain". This were default settings not settings that I had
to adjust.

Notwithstanding, if I make the changes you indicate concerning
preserving
the Primary zone and deleting the zone off of the non-SBS DC and then
letting DND replicate will that correct the issues that are present
with things such as the missing NS record?

Thanks for the DCDiag syntax suggestion. I did run a DCDiag test
earlier but all came back good. I did not however run the syntax you
offered. I'll take a look.


If you use the switches referred to, dcdiag will test the delegation for
_msdcs, adding the /fix switch, it might fix the missing delegation. You can
fix the delegation manually by double clicking on the NS record, then click
the "Add" button, enter the Fully-qualified name of the missing NS record,
then click resolve, if it does not resolve check that there is an A record
on both DNS servers for the missing NS record. You can also click the
"Browse" button and browse to the A record for the missing DNS server's NS
record.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


.

Quantcast