Re: DNS Crash errors 4015 & 4004

Hello Kurt,

Thank you for your reply.

I understand that the DNS server is only listening on the internal adapter,
but the issue persists.

Firstly I am sorry for the inconvenience that you are experiencing and I
appreciate your time and effort spent on this issue.

It seems that the issue is quite complex and we may need more time to
troubleshoot it.

Your patience will be appreciated.

Let's try following steps to narrow down the cause:

1. Windows Server 2003 Domain Controllers hosting AD-Integrated DNS zones
may sporadically fail to load the DNS zones after reboot. When this occurs
the dnsmgmt.msc snap-in displays a Red "X" for the server name instead of
the DNS zones and connectivity is impacted. When this issue occurs the DNS
Event log will also log Event ID 4015. Determine if LDAP is working
correctly on the DC and if the zones can be viewed using LDP.exe or other
LDAP capable tools.

a) Click Start, select RUN, type "LDP.exe" and click Open
b) Click Connection and select Connect
c) Enter the name of the DC, enter port 389 and click OK
d) Click Connection and select Bind.
e) Click on View and select Tree and for BaseDN enter the DN for your zone
using the example below and click OK:

DC=<zoneName.com>,CN=MicrosoftDNS,DC=ForestDnsZones,DC=<rootdomain>,DC=<com>

f) Double-click on the

DC=<zoneName.com>,CN=MicrosoftDNS,DC=ForestDnsZones,DC=<rootdomain>,DC=<com>
when it populates in the left pane to see if the records are present.

2. If this object does not exist, please let me know. If the zones are
viewable in LDP.exe and restarting the DNS Server service does not cause
the zones to load, this issue is likely due to a timing issue where DNS
fails to attempt retries at loading the zones when the LDAP server is busy.
Some of these failures are caused by an inability to locate the zone object
in the directory. At the DNS server, use LDIFDE to export the zone to see
if it reports an error. The command to type in the command prompt will be
similar to this:

Ldifde -f outputFile.txt -d
DC=<zonename.com>,CN=MicrosoftDNS,DC=ForestDnsZones,DC=<rootdomain>,DC=<com>

3. Please let me know if there is any error encountered.

In addition, please send following files to v-mzhuan@xxxxxxxxxxxxx:

1. DNS database
===========
To dump the DNS database, please use the following commands under command
prompt:

DNSCMD /ExportZone _msdcs.***.local msdcs.txt
DNSCMD /ExportZone ****.local dvbnewyork.txt

Then get the two files located in C:\Windows\System32\DNS for further
investigation. For more information regarding this utility, please refer to
the following article:

304489 Extracting DNS Active Directory-Integrated Zone Files
http://support.microsoft.com/?id=304489

2. Get DNS debug log:
===============
Select and enable debug logging options on the DNS server; Windows Server
2003
http://technet2.microsoft.com/windowsserver/en/library/9b82dd18-e7b2-4c36-b9
81-471b7b762c461033.mspx?mfr=true

NOTE: Please specify the name and the path of the log file.

After enabling the DNS debug log, reproduce the issue and then send me the
log file.

Best regards,

Manfred Zhuang(MSFT)
Microsoft Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Kurt Leege" <kurt@xxxxxxxxx>
| References: <#57km4D2HHA.6128@xxxxxxxxxxxxxxxxxxxx>
<xCcuQaO2HHA.5836@xxxxxxxxxxxxxxxxxxxxxx>
<uRm#yPS2HHA.4584@xxxxxxxxxxxxxxxxxxxx>
<qb97Uqb2HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<TUITuVm3HHA.6140@xxxxxxxxxxxxxxxxxxxxxx>
<EDr8hXm3HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
<OdYkyx33HHA.1164@xxxxxxxxxxxxxxxxxxxx>
<MKatdG#3HHA.360@xxxxxxxxxxxxxxxxxxxxxx>
<fWcjK1J4HHA.360@xxxxxxxxxxxxxxxxxxxxxx>
<cTmj5qM4HHA.4100@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: DNS Crash errors 4015 & 4004
| Date: Fri, 17 Aug 2007 12:14:16 -0400
| Lines: 46
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| Message-ID: <eLAxsmO4HHA.5844@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 248-186.customer.cloud9.net 168.100.248.186
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:57263
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Checked the settings, DNS is only listening on the internal NIC and there
| are no references to the external adapter address in the Forward Lookup
| zone.
|
| Any further thoughts? What kinda bugs me is this just started randomly,
| without any system changes. Is that a clue?
|
| Thanks for your patience and help with this. It is much appreciated
|
| Kurt
|
|
| "Manfred Zhuang [MSFT]" <v-mzhuan@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:cTmj5qM4HHA.4100@xxxxxxxxxxxxxxxxxxxxxxxxx
| > Hello Kurt,
| >
| > Thank you for uploading the files.
| >
| > After checking them, I found the data of 4015 error is 00000051.
| >
| > It is most likely caused by that DNS server is listening on both the
| > internal and external adapters.
| >
| > I suggest you check following setting:
| >
| > 1. Open DNS management.
| > 2. Right click your server and click Properties.
| > 3. Please check how many IP addresses the server is listening on.
| >
| > Please ensure it only listens on the internal NIC.
| >
| > After that, please delete all records in forward lookup zone that
| > reference
| > the external adapter address.
| >
| > Please try the above steps at your earliest convenience. If you have any
| > concern, please feel free to let me know.
| >
| > Best regards,
| >
| > Manfred Zhuang(MSFT)
| > Microsoft Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
|
|
|

.

Relevant Pages

  • Re: DCDIAG DNS Failure
    ... Without advance view I have 4 forward lookup zones and 7 reverse ... My DNS server is not multihomed. ...
    (microsoft.public.windows.server.dns)
  • Re: DCDIAG DNS Failure
    ... Without advance view I have 4 forward lookup zones and 7 reverse ... do you need all these reverse zones or your DNS server is multihomed ... -Your exchange server that is giving you problems, can it send Mail outside, ...
    (microsoft.public.windows.server.dns)
  • Re: DCDIAG DNS Failure
    ... also can you check if the DNS server is responding to all its IPAddress ... zone and forward zones. ... did you created MX records for the exchange domains that you're hosting? ...
    (microsoft.public.windows.server.dns)
  • RE: SBS2003: Intermitent Connectivity from Clients to Public websi
    ... I already had two zones set up under the Forward Zones. ... names along with their respective IP addresses per DNS name. ... Originally, I did install ISA Server, but uninstalled it. ... you can access them normally on SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: Trust Between 2 domain Controllers
    ... Here the netdiag status of the server ripples... ... Testing DNS ... LISTENING ... Binding Paths: ...
    (microsoft.public.win2000.active_directory)
Loading