DNS Delegation fail

[Nuno85]

Need help with this issue.

Had to restart the AD/DNS main box, as the hardware died, but now it seems DNS is not being picked up, I’ve run the following test and I get Del FAIL. Any ideas?

DCDIAG /TEST:DNS /v /e

[jrp78]

See if this post helps. It talks about needing to do some cleanup.

DCDIAG /TEST:DNS fails delegation because of old DNS server

Running a DCDIAG /TEST:DNS on my DNS servers, I get a fail due to TEST: Delegations (Del) ERROR: DNS Server MyLongGoneServer.mydomain.internal IP: 192.168.x.x Broken delegated domain _msdcs.MYDOMAIN.INTERNAL I can't find the record for this server anywhere, especially in the _msdcs section. The name is still sued as a CNAME in mydomain.internal for other purposes

[Nuno85]

I’ve already checked that link @jrp78 but thank you.

@jayparker9836

[jrp78]

Give us some more details about how the main box died and how you rebuilt it. Did you restore from a backup or rebuild from scratch? Did the server hold your FSMO roles?

[Nuno85]

Box holding the VMs AD/DNS died.

We got an identical box, so it was only the steps of moving the disks identical to the new box, so the RAID show all the disks, so no configuration need it to do.

I can see all VMs and we can access them but for some reason when computers boot don’t seem to be able to ping to some servers by IP or name.

The DNS Server holds all the FSMO Roles.

[jrp78]

Does the new server have all the proper static IP information configured on its NIC?

[Nuno85]

Yes

[jrp78]

Have you looked at the event viewer logs on the DC to see if there any glaring errors in the application and/or system log?

Also, have you run a full DCDIAG for any clues?

dcdiag /e /c /v /q > c:\dcdiag.txt

[Nuno85]

HI @jayparker9836 ​,

I re-run the DCDIAG again but this time I saved it to a file, looking at the text file I noticed all my delegations were failing because it seem someone who created the DNS original it created a double delegation on the server 'mydomain.local.mydomain.local’, after finding the issue in DNS I re-run the test again and all Delegations passed. Got a few Warn and a Fail on Dyn & RReg section, I just need to g through the report again.

Thank you for your assistance.

[jrp78]

Nice work

[Cryptospook]

Hi, I’ve got the exact same issue. Can you be more verbose about where you found the doubled fqdn? Ive looked at every a record Ns record and srv record and I’m just not seeing it.